yasmina88

Pb résolu, mon PC respire mieux grâce aux efforts d'apollo. Merci infiniment apollo je te suis vraiment reconnaissante.

Tu es vraiment un ange (affirmatif) et je ne sais pas comment te remercier.... Le scan est très long ci-joint les rapports demandés: [ Rapport ToolsCleaner version 2.2.6 (par A.Rothstein & dj QUIOU) ] -->- Recherche: C:\TB.txt: trouvé ! C:\!Killbox: trouvé ! C:\Toolbar SD: trouvé ! C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé ! C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé ! C:\Documents and Settings\Administrateur\Bureau\SdFix.exe: trouvé ! C:\Documents and Settings\Administrateur\Bureau\HijackThis.lnk: trouvé ! C:\Documents and Settings\Administrateur\Bureau\ToolBarSD.exe: trouvé ! C:\Documents and Settings\Administrateur\Bureau\hijackthis.log: trouvé ! C:\Program Files\Trend Micro\HijackThis: trouvé ! C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé ! --------------------------------- -->- Suppression: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé ! C:\Documents and Settings\Administrateur\Bureau\SdFix.exe: supprimé ! C:\Documents and Settings\Administrateur\Bureau\HijackThis.lnk: supprimé ! C:\Documents and Settings\Administrateur\Bureau\ToolBarSD.exe: supprimé ! C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé ! C:\TB.txt: supprimé ! C:\Documents and Settings\Administrateur\Bureau\hijackthis.log: supprimé ! C:\!Killbox: supprimé ! C:\Toolbar SD: supprimé ! C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé ! C:\Program Files\Trend Micro\HijackThis: supprimé ! Rapport AVP TOOLS Scan ---- Scanned: 967025 Detected: 31 Untreated: 0 Start time: 05/12/2008 18:30:19 Duration: 18:43:18 Finish time: 06/12/2008 13:13:37 Detected -------- Status Object ------ ------ deleted: Trojan program Trojan-Spy.HTML.Bayfraud.hn Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"eBay Inc" <support_refnum_085717@ebay.com>][subject:Message is infected : eBay Inc fraud verification process [sun, 14 Aug 2005 11:47:52 +0300]][Time:2005/08/14 08:00:28]/text/html deleted: malware Hoax.Win32.BadJoke.Formatter Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Message is infected : Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe deleted: Trojan program Trojan-Spy.HTML.Usbankfraud.p Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"U.S. Bank" <antifraud.ref.num4133060548@usbank.com>][subject:Message is infected : U.S. Bank: PIease Confirm Your Details][Time:2004/08/11 23:55:45]/text/html deleted: Trojan program Trojan-Spy.HTML.Citifraud.ae Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"CitiBank" <identdep_op0701492@citibank.com>][subject:Message is infected : CitiBank - important fraud alert][Time:2004/09/15 22:18:44]/text/html deleted: Trojan program Trojan-Spy.HTML.Smitfraud.c Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref90@smithbarney.com>][subject:Message is infected : Identity Theft Solutions From Smith Barney [sun, 03 Oct 2004 16:59:56 +0400]][Time:2004/10/03 11:57:45]/text/html deleted: Trojan program Trojan-Spy.HTML.Citifraud.ai Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Citizens bank" <antifraud.ref.num7093@citizensbank.com>][subject:Message is infected : Attention To All Citizens Bank Clients [Tue, 26 Oct 2004 02:53:11 +0400]][Time:2004/10/25 22:02:57]/text/html deleted: Trojan program Trojan-Spy.HTML.Smitfraud.c Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref373374968398@smithbarney.com>][subject:Message is infected : SMITH BARNEY: OFFICIAL INFORMATION][Time:2004/10/29 01:37:47]/text/html deleted: Trojan program Trojan-Spy.HTML.Sunfraud.aj Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <support@suntrust.com>][subject:Message is infected : Internet Banking with Bill Pay Fees Waived][Time:2004/11/26 08:18:57]/text/html deleted: Trojan program Trojan-Spy.HTML.Bankfraud.u Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <identdep_op3@suntrust.com>][subject:Message is infected : SunTrust Bank: URGENT SECURITY NOTICE [Tue, 30 Nov 2004 22:37:22 +0500]][Time:2004/11/30 17:44:51]/text/html deleted: Trojan program Trojan-Spy.HTML.Smitfraud.a Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identdep_op9893250@smithbarney.com>][subject:Message is infected : Smith Barney: Special Announce [sat, 29 Jan 2005 17:24:58 -0700]][Time:2005/01/30 00:34:56]/text/html deleted: Trojan program Trojan-Spy.HTML.Bankfraud.dq Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Regions & Union Planters" <support_id_4742535@regions.com>][subject:Message is infected : Regions Bank: please confirm your information [Thu, 31 Mar 2005 07:16:04 -0500]][Time:2005/03/31 12:20:13]/text/html deleted: Trojan program Backdoor.Win32.Hijack.e Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"teqohixud" <teqohixud@fa.org>][subject:Message is infected : Watch my Tits!][Time:2008/09/19 09:30:39]/tube.zip/VideoTube.com.avi.exe deleted: malware Hoax.Win32.BadJoke.Formatter Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Message is infected : Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe deleted: malware Hoax.Win32.BadJoke.Formatter Email message attachment: Identité principale\Dossiers locaux\Éléments envoyés\[From:"MADA Mohamed" <mada@emi.ac.ma>][subject:Message is infected : Fw: Envoi d'un message : PhotosXXX][Time:2003/03/28 16:23:43]/PhotosXXX1.exe deleted: adware not-a-virus:AdWare.Win32.MegaSearch.ad File: C:\Documents and Settings\All Users\Application Data\Avg8\update\backup\avgtoolbar.dll deleted: Trojan program Trojan-Dropper.Win32.Agent.zsb File: C:\Downloads\Advanced.SystemCare.Pro.3.0.0.586.rar/Advanced.SystemCare.Pro.3.0.0.586\asc-setup.rar/asc-setup\asc-setup.EXE//data0000.cab/is165410.exe deleted: adware not-a-virus:AdWare.Win32.MegaSearch.ad File: C:\System Volume Information\_restore{4246BA1D-F8C9-4329-B08B-871A55D4296C}\RP1\A0000029.dll deleted: virus Worm.Win32.AutoRun.dye File: D:\documents\Mes documents\download\McCabe__Smith__Harriot__7th_Edition__Solution_manual.rar/McCabe, Smith, Harriot (7th Edition) Solution manual\setup.exe deleted: adware not-a-virus:AdWare.Win32.Agent.fps File: D:\Doc_C_2\Program Files\eMule\Incoming\avg internet 8.0.156 keygen.exe/setup2.exe//data0002 deleted: Trojan program Trojan-PSW.Win32.OnLineGames.aleu File: F:\jdwx.exe deleted: Trojan program Trojan-PSW.Win32.OnLineGames.amuy File: F:\lgrncie.bat deleted: Trojan program Trojan-Spy.Win32.VB.ahf File: F:\Start.exe deleted: Trojan program Trojan-Banker.Win32.Banbra.ceh File: F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe deleted: Trojan program Packed.Win32.Krap.b File: J:\ceb6eu98.bat deleted: virus Worm.Win32.AutoRun.szn File: J:\ln9.exe deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rbj File: J:\MADA (G)\x.com deleted: Trojan program Trojan-GameThief.Win32.Magania.aiyc File: J:\MADA (G)\b.com deleted: Trojan program Trojan-GameThief.Win32.Magania.ajhv File: J:\MADA (G)\x.bat deleted: Trojan program Packed.Win32.Krap.b File: J:\MADA (G)\i.exe deleted: Trojan program Trojan-GameThief.Win32.Magania.akcs File: J:\MADA (G)\ogcikeq.com deleted: Trojan program Packed.Win32.Krap.b File: J:\MADA (G)\ceb6eu98.bat Events ------ Time Name Status Reason ---- ---- ------ ------ 05/12/2008 18:37:42 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"eBay Inc" <support_refnum_085717@ebay.com>][subject:eBay Inc fraud verification process [sun, 14 Aug 2005 11:47:52 +0300]][Time:2005/08/14 08:00:28]/text/html detected Trojan program 'Trojan-Spy.HTML.Bayfraud.hn' 05/12/2008 18:37:42 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"eBay Inc" <support_refnum_085717@ebay.com>][subject:eBay Inc fraud verification process [sun, 14 Aug 2005 11:47:52 +0300]][Time:2005/08/14 08:00:28]/text/html not disinfected postponed 05/12/2008 18:37:51 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe detected malware 'Hoax.Win32.BadJoke.Formatter' 05/12/2008 18:37:51 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe not disinfected postponed 05/12/2008 18:38:52 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Samir Bennani" <sbennani@emi.ac.ma>][subject:AD-AWARE and co][Time:2004/03/25 09:39:02]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\lxtkey.exe password protected 05/12/2008 18:38:52 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Samir Bennani" <sbennani@emi.ac.ma>][subject:AD-AWARE and co][Time:2004/03/25 09:39:02]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\laxity.nfo password protected 05/12/2008 18:39:12 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"U.S. Bank" <antifraud.ref.num4133060548@usbank.com>][subject:U.S. Bank: PIease Confirm Your Details][Time:2004/08/11 23:55:45]/text/html detected Trojan program 'Trojan-Spy.HTML.Usbankfraud.p' 05/12/2008 18:39:12 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"U.S. Bank" <antifraud.ref.num4133060548@usbank.com>][subject:U.S. Bank: PIease Confirm Your Details][Time:2004/08/11 23:55:45]/text/html not disinfected postponed 05/12/2008 18:39:16 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"CitiBank" <identdep_op0701492@citibank.com>][subject:CitiBank - important fraud alert][Time:2004/09/15 22:18:44]/text/html detected Trojan program 'Trojan-Spy.HTML.Citifraud.ae' 05/12/2008 18:39:16 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"CitiBank" <identdep_op0701492@citibank.com>][subject:CitiBank - important fraud alert][Time:2004/09/15 22:18:44]/text/html not disinfected postponed 05/12/2008 18:39:19 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref90@smithbarney.com>][subject:Identity Theft Solutions From Smith Barney [sun, 03 Oct 2004 16:59:56 +0400]][Time:2004/10/03 11:57:45]/text/html detected Trojan program 'Trojan-Spy.HTML.Smitfraud.c' 05/12/2008 18:39:19 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref90@smithbarney.com>][subject:Identity Theft Solutions From Smith Barney [sun, 03 Oct 2004 16:59:56 +0400]][Time:2004/10/03 11:57:45]/text/html not disinfected postponed 05/12/2008 18:39:20 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Citizens bank" <antifraud.ref.num7093@citizensbank.com>][subject:Attention To All Citizens Bank Clients [Tue, 26 Oct 2004 02:53:11 +0400]][Time:2004/10/25 22:02:57]/text/html detected Trojan program 'Trojan-Spy.HTML.Citifraud.ai' 05/12/2008 18:39:20 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Citizens bank" <antifraud.ref.num7093@citizensbank.com>][subject:Attention To All Citizens Bank Clients [Tue, 26 Oct 2004 02:53:11 +0400]][Time:2004/10/25 22:02:57]/text/html not disinfected postponed 05/12/2008 18:39:20 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref373374968398@smithbarney.com>][subject:SMITH BARNEY: OFFICIAL INFORMATION][Time:2004/10/29 01:37:47]/text/html detected Trojan program 'Trojan-Spy.HTML.Smitfraud.c' 05/12/2008 18:39:20 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref373374968398@smithbarney.com>][subject:SMITH BARNEY: OFFICIAL INFORMATION][Time:2004/10/29 01:37:47]/text/html not disinfected postponed 05/12/2008 18:39:28 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <support@suntrust.com>][subject:Internet Banking with Bill Pay Fees Waived][Time:2004/11/26 08:18:57]/text/html detected Trojan program 'Trojan-Spy.HTML.Sunfraud.aj' 05/12/2008 18:39:28 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <support@suntrust.com>][subject:Internet Banking with Bill Pay Fees Waived][Time:2004/11/26 08:18:57]/text/html not disinfected postponed 05/12/2008 18:39:42 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <identdep_op3@suntrust.com>][subject:SunTrust Bank: URGENT SECURITY NOTICE [Tue, 30 Nov 2004 22:37:22 +0500]][Time:2004/11/30 17:44:51]/text/html detected Trojan program 'Trojan-Spy.HTML.Bankfraud.u' 05/12/2008 18:39:42 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <identdep_op3@suntrust.com>][subject:SunTrust Bank: URGENT SECURITY NOTICE [Tue, 30 Nov 2004 22:37:22 +0500]][Time:2004/11/30 17:44:51]/text/html not disinfected postponed 05/12/2008 18:39:59 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identdep_op9893250@smithbarney.com>][subject:Smith Barney: Special Announce [sat, 29 Jan 2005 17:24:58 -0700]][Time:2005/01/30 00:34:56]/text/html detected Trojan program 'Trojan-Spy.HTML.Smitfraud.a' 05/12/2008 18:39:59 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identdep_op9893250@smithbarney.com>][subject:Smith Barney: Special Announce [sat, 29 Jan 2005 17:24:58 -0700]][Time:2005/01/30 00:34:56]/text/html not disinfected postponed 05/12/2008 18:40:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Regions & Union Planters" <support_id_4742535@regions.com>][subject:Regions Bank: please confirm your information [Thu, 31 Mar 2005 07:16:04 -0500]][Time:2005/03/31 12:20:13]/text/html detected Trojan program 'Trojan-Spy.HTML.Bankfraud.dq' 05/12/2008 18:40:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Regions & Union Planters" <support_id_4742535@regions.com>][subject:Regions Bank: please confirm your information [Thu, 31 Mar 2005 07:16:04 -0500]][Time:2005/03/31 12:20:13]/text/html not disinfected postponed 05/12/2008 18:40:45 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"teqohixud" <teqohixud@fa.org>][subject:Watch my Tits!][Time:2008/09/19 09:30:39]/tube.zip/VideoTube.com.avi.exe detected Trojan program 'Backdoor.Win32.Hijack.e' 05/12/2008 18:40:45 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"teqohixud" <teqohixud@fa.org>][subject:Watch my Tits!][Time:2008/09/19 09:30:39]/tube.zip/VideoTube.com.avi.exe not disinfected postponed 05/12/2008 18:41:25 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe detected malware 'Hoax.Win32.BadJoke.Formatter' 05/12/2008 18:41:25 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe not disinfected postponed 05/12/2008 18:42:43 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Samir Bennani" <sbennani@emi.ac.ma>][subject:AD-AWARE and co][Time:2004/03/25 09:39:02]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\lxtkey.exe password protected 05/12/2008 18:42:43 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Samir Bennani" <sbennani@emi.ac.ma>][subject:AD-AWARE and co][Time:2004/03/25 09:39:02]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\laxity.nfo password protected 05/12/2008 18:43:30 Email message attachment: Identité principale\Dossiers locaux\Éléments envoyés\[From:"MADA Mohamed" <mada@emi.ac.ma>][subject:Fw: Envoi d'un message : PhotosXXX][Time:2003/03/28 16:23:43]/PhotosXXX1.exe detected malware 'Hoax.Win32.BadJoke.Formatter' 05/12/2008 18:43:30 Email message attachment: Identité principale\Dossiers locaux\Éléments envoyés\[From:"MADA Mohamed" <mada@emi.ac.ma>][subject:Fw: Envoi d'un message : PhotosXXX][Time:2003/03/28 16:23:43]/PhotosXXX1.exe not disinfected postponed 05/12/2008 18:44:28 Email message attachment: Identité principale\Dossiers locaux\Éléments envoyés\[From:"Mada Mohamed" <mada@emi.ac.ma>][subject:Fw: AD-AWARE and co][Time:2004/05/07 10:24:59]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\lxtkey.exe password protected 05/12/2008 18:44:28 Email message attachment: Identité principale\Dossiers locaux\Éléments envoyés\[From:"Mada Mohamed" <mada@emi.ac.ma>][subject:Fw: AD-AWARE and co][Time:2004/05/07 10:24:59]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\laxity.nfo password protected 05/12/2008 18:49:30 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"eBay Inc" <support_refnum_085717@ebay.com>][subject:Message is infected : eBay Inc fraud verification process [sun, 14 Aug 2005 11:47:52 +0300]][Time:2005/08/14 08:00:28]/text/html detected Trojan program 'Trojan-Spy.HTML.Bayfraud.hn' 05/12/2008 18:49:30 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"eBay Inc" <support_refnum_085717@ebay.com>][subject:Message is infected : eBay Inc fraud verification process [sun, 14 Aug 2005 11:47:52 +0300]][Time:2005/08/14 08:00:28]/text/html not disinfected postponed 05/12/2008 18:49:39 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Message is infected : Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe detected malware 'Hoax.Win32.BadJoke.Formatter' 05/12/2008 18:49:39 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Message is infected : Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe not disinfected postponed 05/12/2008 18:50:39 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Samir Bennani" <sbennani@emi.ac.ma>][subject:AD-AWARE and co][Time:2004/03/25 09:39:02]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\lxtkey.exe password protected 05/12/2008 18:50:39 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Samir Bennani" <sbennani@emi.ac.ma>][subject:AD-AWARE and co][Time:2004/03/25 09:39:02]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\laxity.nfo password protected 05/12/2008 18:51:00 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"U.S. Bank" <antifraud.ref.num4133060548@usbank.com>][subject:Message is infected : U.S. Bank: PIease Confirm Your Details][Time:2004/08/11 23:55:45]/text/html detected Trojan program 'Trojan-Spy.HTML.Usbankfraud.p' 05/12/2008 18:51:00 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"U.S. Bank" <antifraud.ref.num4133060548@usbank.com>][subject:Message is infected : U.S. Bank: PIease Confirm Your Details][Time:2004/08/11 23:55:45]/text/html not disinfected postponed 05/12/2008 18:51:03 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"CitiBank" <identdep_op0701492@citibank.com>][subject:Message is infected : CitiBank - important fraud alert][Time:2004/09/15 22:18:44]/text/html detected Trojan program 'Trojan-Spy.HTML.Citifraud.ae' 05/12/2008 18:51:03 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"CitiBank" <identdep_op0701492@citibank.com>][subject:Message is infected : CitiBank - important fraud alert][Time:2004/09/15 22:18:44]/text/html not disinfected postponed 05/12/2008 18:51:06 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref90@smithbarney.com>][subject:Message is infected : Identity Theft Solutions From Smith Barney [sun, 03 Oct 2004 16:59:56 +0400]][Time:2004/10/03 11:57:45]/text/html detected Trojan program 'Trojan-Spy.HTML.Smitfraud.c' 05/12/2008 18:51:06 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref90@smithbarney.com>][subject:Message is infected : Identity Theft Solutions From Smith Barney [sun, 03 Oct 2004 16:59:56 +0400]][Time:2004/10/03 11:57:45]/text/html not disinfected postponed 05/12/2008 18:51:07 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Citizens bank" <antifraud.ref.num7093@citizensbank.com>][subject:Message is infected : Attention To All Citizens Bank Clients [Tue, 26 Oct 2004 02:53:11 +0400]][Time:2004/10/25 22:02:57]/text/html detected Trojan program 'Trojan-Spy.HTML.Citifraud.ai' 05/12/2008 18:51:07 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Citizens bank" <antifraud.ref.num7093@citizensbank.com>][subject:Message is infected : Attention To All Citizens Bank Clients [Tue, 26 Oct 2004 02:53:11 +0400]][Time:2004/10/25 22:02:57]/text/html not disinfected postponed 05/12/2008 18:51:08 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref373374968398@smithbarney.com>][subject:Message is infected : SMITH BARNEY: OFFICIAL INFORMATION][Time:2004/10/29 01:37:47]/text/html detected Trojan program 'Trojan-Spy.HTML.Smitfraud.c' 05/12/2008 18:51:08 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref373374968398@smithbarney.com>][subject:Message is infected : SMITH BARNEY: OFFICIAL INFORMATION][Time:2004/10/29 01:37:47]/text/html not disinfected postponed 05/12/2008 18:51:14 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <support@suntrust.com>][subject:Message is infected : Internet Banking with Bill Pay Fees Waived][Time:2004/11/26 08:18:57]/text/html detected Trojan program 'Trojan-Spy.HTML.Sunfraud.aj' 05/12/2008 18:51:14 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <support@suntrust.com>][subject:Message is infected : Internet Banking with Bill Pay Fees Waived][Time:2004/11/26 08:18:57]/text/html not disinfected postponed 05/12/2008 18:51:27 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <identdep_op3@suntrust.com>][subject:Message is infected : SunTrust Bank: URGENT SECURITY NOTICE [Tue, 30 Nov 2004 22:37:22 +0500]][Time:2004/11/30 17:44:51]/text/html detected Trojan program 'Trojan-Spy.HTML.Bankfraud.u' 05/12/2008 18:51:27 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <identdep_op3@suntrust.com>][subject:Message is infected : SunTrust Bank: URGENT SECURITY NOTICE [Tue, 30 Nov 2004 22:37:22 +0500]][Time:2004/11/30 17:44:51]/text/html not disinfected postponed 05/12/2008 18:51:44 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identdep_op9893250@smithbarney.com>][subject:Message is infected : Smith Barney: Special Announce [sat, 29 Jan 2005 17:24:58 -0700]][Time:2005/01/30 00:34:56]/text/html detected Trojan program 'Trojan-Spy.HTML.Smitfraud.a' 05/12/2008 18:51:44 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identdep_op9893250@smithbarney.com>][subject:Message is infected : Smith Barney: Special Announce [sat, 29 Jan 2005 17:24:58 -0700]][Time:2005/01/30 00:34:56]/text/html not disinfected postponed 05/12/2008 18:52:18 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Regions & Union Planters" <support_id_4742535@regions.com>][subject:Message is infected : Regions Bank: please confirm your information [Thu, 31 Mar 2005 07:16:04 -0500]][Time:2005/03/31 12:20:13]/text/html detected Trojan program 'Trojan-Spy.HTML.Bankfraud.dq' 05/12/2008 18:52:18 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Regions & Union Planters" <support_id_4742535@regions.com>][subject:Message is infected : Regions Bank: please confirm your information [Thu, 31 Mar 2005 07:16:04 -0500]][Time:2005/03/31 12:20:13]/text/html not disinfected postponed 05/12/2008 18:52:29 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"teqohixud" <teqohixud@fa.org>][subject:Message is infected : Watch my Tits!][Time:2008/09/19 09:30:39]/tube.zip/VideoTube.com.avi.exe detected Trojan program 'Backdoor.Win32.Hijack.e' 05/12/2008 18:52:29 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"teqohixud" <teqohixud@fa.org>][subject:Message is infected : Watch my Tits!][Time:2008/09/19 09:30:39]/tube.zip/VideoTube.com.avi.exe not disinfected postponed 05/12/2008 18:53:09 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Message is infected : Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe detected malware 'Hoax.Win32.BadJoke.Formatter' 05/12/2008 18:53:09 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Message is infected : Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe not disinfected postponed 05/12/2008 18:54:27 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Samir Bennani" <sbennani@emi.ac.ma>][subject:AD-AWARE and co][Time:2004/03/25 09:39:02]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\lxtkey.exe password protected 05/12/2008 18:54:27 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Samir Bennani" <sbennani@emi.ac.ma>][subject:AD-AWARE and co][Time:2004/03/25 09:39:02]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\laxity.nfo password protected 05/12/2008 18:55:14 Email message attachment: Identité principale\Dossiers locaux\Éléments envoyés\[From:"MADA Mohamed" <mada@emi.ac.ma>][subject:Message is infected : Fw: Envoi d'un message : PhotosXXX][Time:2003/03/28 16:23:43]/PhotosXXX1.exe detected malware 'Hoax.Win32.BadJoke.Formatter' 05/12/2008 18:55:14 Email message attachment: Identité principale\Dossiers locaux\Éléments envoyés\[From:"MADA Mohamed" <mada@emi.ac.ma>][subject:Message is infected : Fw: Envoi d'un message : PhotosXXX][Time:2003/03/28 16:23:43]/PhotosXXX1.exe not disinfected postponed 05/12/2008 18:56:11 Email message attachment: Identité principale\Dossiers locaux\Éléments envoyés\[From:"Mada Mohamed" <mada@emi.ac.ma>][subject:Fw: AD-AWARE and co][Time:2004/05/07 10:24:59]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\lxtkey.exe password protected 05/12/2008 18:56:11 Email message attachment: Identité principale\Dossiers locaux\Éléments envoyés\[From:"Mada Mohamed" <mada@emi.ac.ma>][subject:Fw: AD-AWARE and co][Time:2004/05/07 10:24:59]/lxttr506-2003-5-26_Trojan Remover v5.0.6..rar/lxttr506-2003-5-26\laxity.nfo password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule.zip/VidÚos.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule1.zip/Jeux.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule1.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule2.zip/Traducteur.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule2.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule3.zip/TÚlÚcharger les programmes.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule3.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule4.zip/VidÚos.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule4.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule5.zip/Jeux.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule5.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule6.zip/Traducteur.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule6.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule7.zip/TÚlÚcharger les programmes.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule7.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule8.zip/VidÚos.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule8.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule9.zip/Jeux.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule9.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule10.zip/Traducteur.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule10.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule11.zip/TÚlÚcharger les programmes.url password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule11.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart.zip/sbRecovery.reg password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart1.zip/RegistrySmart on the Web.lnk password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart1.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart2.zip/RegistrySmart.lnk password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart2.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart3.zip/Uninstall RegistrySmart.lnk password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart3.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart4.zip/Documents and Settings/All Users/Application Data/Spybot - Search & Destroy/Recovery/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart5.zip/sbRecovery.reg password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart5.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusOverride.zip/sbRecovery.reg password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusOverride.zip/sbRecovery.ini password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinAOLPassi.zip/sbRecovery.reg password protected 05/12/2008 19:39:24 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinAOLPassi.zip/sbRecovery.ini password protected 05/12/2008 19:39:43 File: C:\Documents and Settings\All Users\Application Data\Avg8\update\backup\avgtoolbar.dll detected adware 'not-a-virus:AdWare.Win32.MegaSearch.ad' 05/12/2008 19:39:44 File: C:\Documents and Settings\All Users\Application Data\Avg8\update\backup\avgtoolbar.dll not disinfected postponed 05/12/2008 19:48:42 File: C:\Documents and Settings\Administrateur\Bureau\70383___chemical_process_performance_evaluation.7z//Chemical_Process_Performance_Evaluation.pdf password protected 05/12/2008 19:49:43 File: C:\Documents and Settings\Administrateur\Bureau\hanofinch.rar password protected 05/12/2008 19:49:43 File: C:\Documents and Settings\Administrateur\Bureau\hanofinch.rar password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH1.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH10.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH11.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH12.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH13.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH14.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH15.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH17.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH18.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH19.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH2.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH20.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH21.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH22.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH23.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH24.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH25.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH26.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH27.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH29.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH3.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH30.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH4.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH5.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH6.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH7.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH8.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH9.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\INTROTOC.PDF password protected 05/12/2008 20:42:10 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\THUMBS.DB password protected 05/12/2008 21:03:52 File: C:\Downloads\Advanced.SystemCare.Pro.3.0.0.586.rar/Advanced.SystemCare.Pro.3.0.0.586\asc-setup.rar/asc-setup\asc-setup.EXE//data0000.cab/is165410.exe detected Trojan program 'Trojan-Dropper.Win32.Agent.zsb' 05/12/2008 21:03:52 File: C:\Downloads\Advanced.SystemCare.Pro.3.0.0.586.rar/Advanced.SystemCare.Pro.3.0.0.586\asc-setup.rar/asc-setup\asc-setup.EXE//data0000.cab/is165410.exe not disinfected postponed 05/12/2008 21:03:55 File: C:\System Volume Information\_restore{4246BA1D-F8C9-4329-B08B-871A55D4296C}\RP1\A0000029.dll detected adware 'not-a-virus:AdWare.Win32.MegaSearch.ad' 05/12/2008 21:03:55 File: C:\System Volume Information\_restore{4246BA1D-F8C9-4329-B08B-871A55D4296C}\RP1\A0000029.dll not disinfected postponed 05/12/2008 21:52:10 File: D:\CH_ENGI\Scot Fogler\software\quick\quick3.exe//#/data.z processing error 05/12/2008 21:57:15 File: D:\documents\Mes documents\download\Boiler_Operator_s_Handbook.rar/Boiler Operator's Handbook\Boiler Operator's Handbook.pdf password protected 05/12/2008 21:57:15 File: D:\documents\Mes documents\download\Boiler_Operator_s_Handbook.rar/Boiler Operator's Handbook\BMSSHOW.exe password protected 05/12/2008 21:57:15 File: D:\documents\Mes documents\download\Boiler_Operator_s_Handbook.rar/Boiler Operator's Handbook\Cycling Efficiency spreadsheet\Cycling Efficiency spreadsheet for steam boilers.xls password protected 05/12/2008 21:57:15 File: D:\documents\Mes documents\download\Boiler_Operator_s_Handbook.rar/Boiler Operator's Handbook\Cycling Efficiency spreadsheet\Cycling Efficiency spreadsheet for hot water boilers.xls password protected 05/12/2008 22:01:05 File: D:\documents\Mes documents\download\McCabe__Smith__Harriot__7th_Edition__Solution_manual.rar/McCabe, Smith, Harriot (7th Edition) Solution manual\setup.exe detected virus 'Worm.Win32.AutoRun.dye' 05/12/2008 22:01:06 File: D:\documents\Mes documents\download\McCabe__Smith__Harriot__7th_Edition__Solution_manual.rar/McCabe, Smith, Harriot (7th Edition) Solution manual\setup.exe not disinfected postponed 05/12/2008 22:14:55 File: D:\Doc_C_2\Program Files\eMule\Incoming\avg internet 8.0.156 keygen.exe/setup2.exe//data0002 detected adware 'not-a-virus:AdWare.Win32.Agent.fps' 05/12/2008 22:14:58 File: D:\Doc_C_2\Program Files\eMule\Incoming\avg internet 8.0.156 keygen.exe/setup2.exe//data0002 not disinfected postponed 05/12/2008 22:40:02 File: D:\Doc_C_2\Program Files\eMule\Incoming\PDF Password Remover v3.0 + Crack.rar/PDF Password Remover v3.0 + Crack\LEEME.txt password protected 05/12/2008 22:40:02 File: D:\Doc_C_2\Program Files\eMule\Incoming\PDF Password Remover v3.0 + Crack.rar/PDF Password Remover v3.0 + Crack\Patch PDF Password Remover 3.0.exe password protected 05/12/2008 22:40:02 File: D:\Doc_C_2\Program Files\eMule\Incoming\PDF Password Remover v3.0 + Crack.rar/PDF Password Remover v3.0 + Crack\PDF Password Remover 3.0.exe password protected 05/12/2008 22:40:08 File: D:\Doc_C_2\Program Files\eMule\Incoming\Pdf Password Remover v3.0 Winall.rar/PDF.Password.Remover.v3.0.WinALL-CHiCNCREAM\..... Eseltoeter - Board ..... Startseite.url password protected 05/12/2008 22:40:08 File: D:\Doc_C_2\Program Files\eMule\Incoming\Pdf Password Remover v3.0 Winall.rar/PDF.Password.Remover.v3.0.WinALL-CHiCNCREAM\bmc-passwort.nfo password protected 05/12/2008 22:40:08 File: D:\Doc_C_2\Program Files\eMule\Incoming\Pdf Password Remover v3.0 Winall.rar/PDF.Password.Remover.v3.0.WinALL-CHiCNCREAM\chic.nfo password protected 05/12/2008 22:40:08 File: D:\Doc_C_2\Program Files\eMule\Incoming\Pdf Password Remover v3.0 Winall.rar/PDF.Password.Remover.v3.0.WinALL-CHiCNCREAM\cncgan2a.zip password protected 05/12/2008 22:40:08 File: D:\Doc_C_2\Program Files\eMule\Incoming\Pdf Password Remover v3.0 Winall.rar/PDF.Password.Remover.v3.0.WinALL-CHiCNCREAM\file_id.diz password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//Uninstal.exe password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//Ac.ico password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Aide logiciel.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\BDenergies.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Besoins ecs.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\b_vert.jpg password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\DBaccessoires.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\DBconduits.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\DBeaux.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\DBEquipements.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Desinstaller Ôchaude.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\etude.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Fenetre principale.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Formules.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\GestionEtude.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Gestionnaire impression.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\home.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\index.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Licence.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Parametrage etude.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Presentation.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Producteur.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Reindexation.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Reseaux.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Restauration.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Sauvegarde.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\table.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Thumbs.db password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\utilitaires.htm password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Vistal.jpg password protected 05/12/2008 22:45:06 File: D:\download\ECS\InstalOchaude.exe//UPX//ampoule-.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//ampoule.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//annuler2.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//AP.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//Bulles.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//CleAccès.ctz password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//cleutil.ini password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//courrie2.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//email2.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//enlever.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//image\Accumu.bmp password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//image\ACCUMU.WMF password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//image\INSTA.bmp password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//image\INSTA.WMF password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//image\SEINTA.bmp password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//image\SEINTA.WMF password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//image\Thumbs.db password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//Info.txt password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\Eau.FIC password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\Eau.NDX password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\Materiel.FIC password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\Materiel.NDX password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\TARIF.FIC password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\TARIF.NDX password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//InstallOchaude.iip password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//Lic.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//Licence.txt password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//Notecle.txt password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//OCHAUDE.EXE password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//ordi-.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//poubell-.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//recycler.ico password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\Eau.FIC password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\Eau.NDX password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\Materiel.FIC password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\Materiel.NDX password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\TARIF.FIC password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\TARIF.NDX password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//Thumbs.db password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//utile\fsbackup.exe password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//utile\SynchronX_Francais.exe password protected 05/12/2008 22:45:07 File: D:\download\ECS\InstalOchaude.exe//UPX//Vistal.jpg password protected 05/12/2008 23:54:30 File: F:\jdwx.exe detected Trojan program 'Trojan-PSW.Win32.OnLineGames.aleu' 05/12/2008 23:54:30 File: F:\jdwx.exe not disinfected postponed 05/12/2008 23:54:31 File: F:\lgrncie.bat detected Trojan program 'Trojan-PSW.Win32.OnLineGames.amuy' 05/12/2008 23:54:31 File: F:\lgrncie.bat not disinfected postponed 05/12/2008 23:54:31 File: F:\Start.exe detected Trojan program 'Trojan-Spy.Win32.VB.ahf' 05/12/2008 23:54:31 File: F:\Start.exe not disinfected postponed 05/12/2008 23:54:32 File: F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe detected Trojan program 'Trojan-Banker.Win32.Banbra.ceh' 05/12/2008 23:54:32 File: F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe not disinfected postponed 05/12/2008 23:54:32 File: J:\ceb6eu98.bat detected Trojan program 'Packed.Win32.Krap.b' 05/12/2008 23:54:32 File: J:\ceb6eu98.bat not disinfected postponed 05/12/2008 23:54:33 File: J:\ln9.exe detected virus 'Worm.Win32.AutoRun.szn' 05/12/2008 23:54:33 File: J:\ln9.exe not disinfected postponed 05/12/2008 23:54:35 File: J:\MADA (G)\x.com detected Trojan program 'Trojan-GameThief.Win32.OnLineGames.rbj' 05/12/2008 23:54:35 File: J:\MADA (G)\x.com not disinfected postponed 05/12/2008 23:54:37 File: J:\MADA (G)\b.com detected Trojan program 'Trojan-GameThief.Win32.Magania.aiyc' 05/12/2008 23:54:37 File: J:\MADA (G)\b.com not disinfected postponed 05/12/2008 23:54:38 File: J:\MADA (G)\x.bat detected Trojan program 'Trojan-GameThief.Win32.Magania.ajhv' 05/12/2008 23:54:38 File: J:\MADA (G)\x.bat not disinfected postponed 05/12/2008 23:54:38 File: J:\MADA (G)\i.exe detected Trojan program 'Packed.Win32.Krap.b' 05/12/2008 23:54:39 File: J:\MADA (G)\i.exe not disinfected postponed 05/12/2008 23:54:39 File: J:\MADA (G)\ogcikeq.com detected Trojan program 'Trojan-GameThief.Win32.Magania.akcs' 05/12/2008 23:54:39 File: J:\MADA (G)\ogcikeq.com not disinfected postponed 05/12/2008 23:54:39 File: J:\MADA (G)\ceb6eu98.bat detected Trojan program 'Packed.Win32.Krap.b' 05/12/2008 23:54:39 File: J:\MADA (G)\ceb6eu98.bat not disinfected postponed 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule.zip/VidÚos.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule1.zip/Jeux.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule1.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule2.zip/Traducteur.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule2.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule3.zip/TÚlÚcharger les programmes.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule3.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule4.zip/VidÚos.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule4.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule5.zip/Jeux.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule5.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule6.zip/Traducteur.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule6.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule7.zip/TÚlÚcharger les programmes.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule7.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule8.zip/VidÚos.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule8.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule9.zip/Jeux.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule9.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule10.zip/Traducteur.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule10.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule11.zip/TÚlÚcharger les programmes.url password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DreamgroupFakemule11.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart.zip/sbRecovery.reg password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart1.zip/RegistrySmart on the Web.lnk password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart1.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart2.zip/RegistrySmart.lnk password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart2.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart3.zip/Uninstall RegistrySmart.lnk password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart3.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart4.zip/Documents and Settings/All Users/Application Data/Spybot - Search & Destroy/Recovery/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart5.zip/sbRecovery.reg password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart5.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusOverride.zip/sbRecovery.reg password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusOverride.zip/sbRecovery.ini password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinAOLPassi.zip/sbRecovery.reg password protected 06/12/2008 00:36:34 File: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinAOLPassi.zip/sbRecovery.ini password protected 06/12/2008 00:36:53 File: C:\Documents and Settings\All Users\Application Data\Avg8\update\backup\avgtoolbar.dll detected adware 'not-a-virus:AdWare.Win32.MegaSearch.ad' 06/12/2008 00:36:53 File: C:\Documents and Settings\All Users\Application Data\Avg8\update\backup\avgtoolbar.dll not disinfected postponed 06/12/2008 00:45:40 File: C:\Documents and Settings\Administrateur\Bureau\70383___chemical_process_performance_evaluation.7z//Chemical_Process_Performance_Evaluation.pdf password protected 06/12/2008 00:46:40 File: C:\Documents and Settings\Administrateur\Bureau\hanofinch.rar password protected 06/12/2008 00:46:40 File: C:\Documents and Settings\Administrateur\Bureau\hanofinch.rar password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH1.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH10.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH11.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH12.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH13.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH14.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH15.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH17.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH18.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH19.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH2.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH20.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH21.PDF password protected 06/12/2008 01:37:13 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH22.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH23.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH24.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH25.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH26.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH27.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH29.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH3.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH30.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH4.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH5.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH6.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH7.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH8.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\CH9.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\INTROTOC.PDF password protected 06/12/2008 01:37:14 File: C:\Program Files\eMule\Incoming\@Solutions Manual to Accompany Chemical Reaction Engineering.rar/Solutions Manual to Accompany Chemical Reaction Engineering, 3rd Edition\THUMBS.DB password protected 06/12/2008 01:58:26 File: C:\Downloads\Advanced.SystemCare.Pro.3.0.0.586.rar/Advanced.SystemCare.Pro.3.0.0.586\asc-setup.rar/asc-setup\asc-setup.EXE//data0000.cab/is165410.exe detected Trojan program 'Trojan-Dropper.Win32.Agent.zsb' 06/12/2008 01:58:27 File: C:\Downloads\Advanced.SystemCare.Pro.3.0.0.586.rar/Advanced.SystemCare.Pro.3.0.0.586\asc-setup.rar/asc-setup\asc-setup.EXE//data0000.cab/is165410.exe not disinfected postponed 06/12/2008 01:58:30 File: C:\System Volume Information\_restore{4246BA1D-F8C9-4329-B08B-871A55D4296C}\RP1\A0000029.dll detected adware 'not-a-virus:AdWare.Win32.MegaSearch.ad' 06/12/2008 01:58:30 File: C:\System Volume Information\_restore{4246BA1D-F8C9-4329-B08B-871A55D4296C}\RP1\A0000029.dll not disinfected postponed 06/12/2008 02:44:50 File: D:\CH_ENGI\Scot Fogler\software\quick\quick3.exe//#/data.z processing error 06/12/2008 02:49:13 File: D:\documents\Mes documents\download\Boiler_Operator_s_Handbook.rar/Boiler Operator's Handbook\Boiler Operator's Handbook.pdf password protected 06/12/2008 02:49:13 File: D:\documents\Mes documents\download\Boiler_Operator_s_Handbook.rar/Boiler Operator's Handbook\BMSSHOW.exe password protected 06/12/2008 02:49:13 File: D:\documents\Mes documents\download\Boiler_Operator_s_Handbook.rar/Boiler Operator's Handbook\Cycling Efficiency spreadsheet\Cycling Efficiency spreadsheet for steam boilers.xls password protected 06/12/2008 02:49:13 File: D:\documents\Mes documents\download\Boiler_Operator_s_Handbook.rar/Boiler Operator's Handbook\Cycling Efficiency spreadsheet\Cycling Efficiency spreadsheet for hot water boilers.xls password protected 06/12/2008 02:52:52 File: D:\documents\Mes documents\download\McCabe__Smith__Harriot__7th_Edition__Solution_manual.rar/McCabe, Smith, Harriot (7th Edition) Solution manual\setup.exe detected virus 'Worm.Win32.AutoRun.dye' 06/12/2008 02:52:52 File: D:\documents\Mes documents\download\McCabe__Smith__Harriot__7th_Edition__Solution_manual.rar/McCabe, Smith, Harriot (7th Edition) Solution manual\setup.exe not disinfected postponed 06/12/2008 03:06:03 File: D:\Doc_C_2\Program Files\eMule\Incoming\avg internet 8.0.156 keygen.exe/setup2.exe//data0002 detected adware 'not-a-virus:AdWare.Win32.Agent.fps' 06/12/2008 03:06:03 File: D:\Doc_C_2\Program Files\eMule\Incoming\avg internet 8.0.156 keygen.exe/setup2.exe//data0002 not disinfected postponed 06/12/2008 03:29:58 File: D:\Doc_C_2\Program Files\eMule\Incoming\PDF Password Remover v3.0 + Crack.rar/PDF Password Remover v3.0 + Crack\LEEME.txt password protected 06/12/2008 03:29:58 File: D:\Doc_C_2\Program Files\eMule\Incoming\PDF Password Remover v3.0 + Crack.rar/PDF Password Remover v3.0 + Crack\Patch PDF Password Remover 3.0.exe password protected 06/12/2008 03:29:58 File: D:\Doc_C_2\Program Files\eMule\Incoming\PDF Password Remover v3.0 + Crack.rar/PDF Password Remover v3.0 + Crack\PDF Password Remover 3.0.exe password protected 06/12/2008 03:30:04 File: D:\Doc_C_2\Program Files\eMule\Incoming\Pdf Password Remover v3.0 Winall.rar/PDF.Password.Remover.v3.0.WinALL-CHiCNCREAM\..... Eseltoeter - Board ..... Startseite.url password protected 06/12/2008 03:30:04 File: D:\Doc_C_2\Program Files\eMule\Incoming\Pdf Password Remover v3.0 Winall.rar/PDF.Password.Remover.v3.0.WinALL-CHiCNCREAM\bmc-passwort.nfo password protected 06/12/2008 03:30:04 File: D:\Doc_C_2\Program Files\eMule\Incoming\Pdf Password Remover v3.0 Winall.rar/PDF.Password.Remover.v3.0.WinALL-CHiCNCREAM\chic.nfo password protected 06/12/2008 03:30:04 File: D:\Doc_C_2\Program Files\eMule\Incoming\Pdf Password Remover v3.0 Winall.rar/PDF.Password.Remover.v3.0.WinALL-CHiCNCREAM\cncgan2a.zip password protected 06/12/2008 03:30:04 File: D:\Doc_C_2\Program Files\eMule\Incoming\Pdf Password Remover v3.0 Winall.rar/PDF.Password.Remover.v3.0.WinALL-CHiCNCREAM\file_id.diz password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//Uninstal.exe password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//Ac.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Aide logiciel.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\BDenergies.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Besoins ecs.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\b_vert.jpg password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\DBaccessoires.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\DBconduits.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\DBeaux.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\DBEquipements.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Desinstaller Ôchaude.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\etude.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Fenetre principale.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Formules.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\GestionEtude.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Gestionnaire impression.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\home.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\index.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Licence.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Parametrage etude.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Presentation.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Producteur.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Reindexation.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Reseaux.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Restauration.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Sauvegarde.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\table.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Thumbs.db password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\utilitaires.htm password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//aide\Vistal.jpg password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//ampoule-.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//ampoule.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//annuler2.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//AP.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//Bulles.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//CleAccès.ctz password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//cleutil.ini password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//courrie2.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//email2.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//enlever.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//image\Accumu.bmp password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//image\ACCUMU.WMF password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//image\INSTA.bmp password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//image\INSTA.WMF password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//image\SEINTA.bmp password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//image\SEINTA.WMF password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//image\Thumbs.db password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//Info.txt password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\Eau.FIC password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\Eau.NDX password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\Materiel.FIC password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\Materiel.NDX password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\TARIF.FIC password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//instalDB\TARIF.NDX password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//InstallOchaude.iip password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//Lic.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//Licence.txt password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//Notecle.txt password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//OCHAUDE.EXE password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//ordi-.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//poubell-.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//recycler.ico password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\Eau.FIC password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\Eau.NDX password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\Materiel.FIC password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\Materiel.NDX password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\TARIF.FIC password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//sauvDB\TARIF.NDX password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//Thumbs.db password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//utile\fsbackup.exe password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//utile\SynchronX_Francais.exe password protected 06/12/2008 03:35:08 File: D:\download\ECS\InstalOchaude.exe//UPX//Vistal.jpg password protected 06/12/2008 04:44:58 File: F:\jdwx.exe detected Trojan program 'Trojan-PSW.Win32.OnLineGames.aleu' 06/12/2008 04:44:58 File: F:\jdwx.exe not disinfected postponed 06/12/2008 04:44:58 File: F:\lgrncie.bat detected Trojan program 'Trojan-PSW.Win32.OnLineGames.amuy' 06/12/2008 04:44:58 File: F:\lgrncie.bat not disinfected postponed 06/12/2008 04:44:58 File: F:\Start.exe detected Trojan program 'Trojan-Spy.Win32.VB.ahf' 06/12/2008 04:44:58 File: F:\Start.exe not disinfected postponed 06/12/2008 04:45:00 File: F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe detected Trojan program 'Trojan-Banker.Win32.Banbra.ceh' 06/12/2008 04:45:00 File: F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe not disinfected postponed 06/12/2008 04:45:00 File: J:\ceb6eu98.bat detected Trojan program 'Packed.Win32.Krap.b' 06/12/2008 04:45:00 File: J:\ceb6eu98.bat not disinfected postponed 06/12/2008 04:45:01 File: J:\ln9.exe detected virus 'Worm.Win32.AutoRun.szn' 06/12/2008 04:45:01 File: J:\ln9.exe not disinfected postponed 06/12/2008 04:45:02 File: J:\MADA (G)\x.com detected Trojan program 'Trojan-GameThief.Win32.OnLineGames.rbj' 06/12/2008 04:45:02 File: J:\MADA (G)\x.com not disinfected postponed 06/12/2008 04:45:05 File: J:\MADA (G)\b.com detected Trojan program 'Trojan-GameThief.Win32.Magania.aiyc' 06/12/2008 04:45:05 File: J:\MADA (G)\b.com not disinfected postponed 06/12/2008 04:45:06 File: J:\MADA (G)\x.bat detected Trojan program 'Trojan-GameThief.Win32.Magania.ajhv' 06/12/2008 04:45:06 File: J:\MADA (G)\x.bat not disinfected postponed 06/12/2008 04:45:06 File: J:\MADA (G)\i.exe detected Trojan program 'Packed.Win32.Krap.b' 06/12/2008 04:45:06 File: J:\MADA (G)\i.exe not disinfected postponed 06/12/2008 04:45:07 File: J:\MADA (G)\ogcikeq.com detected Trojan program 'Trojan-GameThief.Win32.Magania.akcs' 06/12/2008 04:45:07 File: J:\MADA (G)\ogcikeq.com not disinfected postponed 06/12/2008 04:45:07 File: J:\MADA (G)\ceb6eu98.bat detected Trojan program 'Packed.Win32.Krap.b' 06/12/2008 04:45:07 File: J:\MADA (G)\ceb6eu98.bat not disinfected postponed 06/12/2008 04:45:17 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"eBay Inc" <support_refnum_085717@ebay.com>][subject:Message is infected : eBay Inc fraud verification process [sun, 14 Aug 2005 11:47:52 +0300]][Time:2005/08/14 08:00:28]/text/html detected Trojan program 'Trojan-Spy.HTML.Bayfraud.hn' 06/12/2008 08:04:02 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"eBay Inc" <support_refnum_085717@ebay.com>][subject:Message is infected : eBay Inc fraud verification process [sun, 14 Aug 2005 11:47:52 +0300]][Time:2005/08/14 08:00:28]/text/html deleted 06/12/2008 08:04:03 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Message is infected : Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe detected malware 'Hoax.Win32.BadJoke.Formatter' 06/12/2008 08:04:33 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Message is infected : Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe deleted 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"U.S. Bank" <antifraud.ref.num4133060548@usbank.com>][subject:Message is infected : U.S. Bank: PIease Confirm Your Details][Time:2004/08/11 23:55:45]/text/html detected Trojan program 'Trojan-Spy.HTML.Usbankfraud.p' 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"U.S. Bank" <antifraud.ref.num4133060548@usbank.com>][subject:Message is infected : U.S. Bank: PIease Confirm Your Details][Time:2004/08/11 23:55:45]/text/html deleted 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"CitiBank" <identdep_op0701492@citibank.com>][subject:Message is infected : CitiBank - important fraud alert][Time:2004/09/15 22:18:44]/text/html detected Trojan program 'Trojan-Spy.HTML.Citifraud.ae' 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"CitiBank" <identdep_op0701492@citibank.com>][subject:Message is infected : CitiBank - important fraud alert][Time:2004/09/15 22:18:44]/text/html deleted 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref90@smithbarney.com>][subject:Message is infected : Identity Theft Solutions From Smith Barney [sun, 03 Oct 2004 16:59:56 +0400]][Time:2004/10/03 11:57:45]/text/html detected Trojan program 'Trojan-Spy.HTML.Smitfraud.c' 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref90@smithbarney.com>][subject:Message is infected : Identity Theft Solutions From Smith Barney [sun, 03 Oct 2004 16:59:56 +0400]][Time:2004/10/03 11:57:45]/text/html deleted 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Citizens bank" <antifraud.ref.num7093@citizensbank.com>][subject:Message is infected : Attention To All Citizens Bank Clients [Tue, 26 Oct 2004 02:53:11 +0400]][Time:2004/10/25 22:02:57]/text/html detected Trojan program 'Trojan-Spy.HTML.Citifraud.ai' 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Citizens bank" <antifraud.ref.num7093@citizensbank.com>][subject:Message is infected : Attention To All Citizens Bank Clients [Tue, 26 Oct 2004 02:53:11 +0400]][Time:2004/10/25 22:02:57]/text/html deleted 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref373374968398@smithbarney.com>][subject:Message is infected : SMITH BARNEY: OFFICIAL INFORMATION][Time:2004/10/29 01:37:47]/text/html detected Trojan program 'Trojan-Spy.HTML.Smitfraud.c' 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identifdep_ref373374968398@smithbarney.com>][subject:Message is infected : SMITH BARNEY: OFFICIAL INFORMATION][Time:2004/10/29 01:37:47]/text/html deleted 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <support@suntrust.com>][subject:Message is infected : Internet Banking with Bill Pay Fees Waived][Time:2004/11/26 08:18:57]/text/html detected Trojan program 'Trojan-Spy.HTML.Sunfraud.aj' 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <support@suntrust.com>][subject:Message is infected : Internet Banking with Bill Pay Fees Waived][Time:2004/11/26 08:18:57]/text/html deleted 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <identdep_op3@suntrust.com>][subject:Message is infected : SunTrust Bank: URGENT SECURITY NOTICE [Tue, 30 Nov 2004 22:37:22 +0500]][Time:2004/11/30 17:44:51]/text/html detected Trojan program 'Trojan-Spy.HTML.Bankfraud.u' 06/12/2008 08:04:33 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"SunTrust" <identdep_op3@suntrust.com>][subject:Message is infected : SunTrust Bank: URGENT SECURITY NOTICE [Tue, 30 Nov 2004 22:37:22 +0500]][Time:2004/11/30 17:44:51]/text/html deleted 06/12/2008 08:04:34 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identdep_op9893250@smithbarney.com>][subject:Message is infected : Smith Barney: Special Announce [sat, 29 Jan 2005 17:24:58 -0700]][Time:2005/01/30 00:34:56]/text/html detected Trojan program 'Trojan-Spy.HTML.Smitfraud.a' 06/12/2008 08:04:34 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Smith Barney" <identdep_op9893250@smithbarney.com>][subject:Message is infected : Smith Barney: Special Announce [sat, 29 Jan 2005 17:24:58 -0700]][Time:2005/01/30 00:34:56]/text/html deleted 06/12/2008 08:04:34 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Regions & Union Planters" <support_id_4742535@regions.com>][subject:Message is infected : Regions Bank: please confirm your information [Thu, 31 Mar 2005 07:16:04 -0500]][Time:2005/03/31 12:20:13]/text/html detected Trojan program 'Trojan-Spy.HTML.Bankfraud.dq' 06/12/2008 08:04:34 Email message body: Identité principale\Dossiers locaux\Boîte de réception\[From:"Regions & Union Planters" <support_id_4742535@regions.com>][subject:Message is infected : Regions Bank: please confirm your information [Thu, 31 Mar 2005 07:16:04 -0500]][Time:2005/03/31 12:20:13]/text/html deleted 06/12/2008 08:04:34 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"teqohixud" <teqohixud@fa.org>][subject:Message is infected : Watch my Tits!][Time:2008/09/19 09:30:39]/tube.zip/VideoTube.com.avi.exe detected Trojan program 'Backdoor.Win32.Hijack.e' 06/12/2008 08:04:35 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"teqohixud" <teqohixud@fa.org>][subject:Message is infected : Watch my Tits!][Time:2008/09/19 09:30:39]/tube.zip/VideoTube.com.avi.exe deleted 06/12/2008 08:04:35 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Message is infected : Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe detected malware 'Hoax.Win32.BadJoke.Formatter' 06/12/2008 08:04:35 Email message attachment: Identité principale\Dossiers locaux\Boîte de réception\[From:"Youssef Ajdor" <ajdor@emi.ac.ma>][subject:Message is infected : Envoi d'un message : PhotosXXX][Time:2003/03/19 15:08:54]/PhotosXXX1.exe deleted 06/12/2008 08:04:36 Email message attachment: Identité principale\Dossiers locaux\Éléments envoyés\[From:"MADA Mohamed" <mada@emi.ac.ma>][subject:Message is infected : Fw: Envoi d'un message : PhotosXXX][Time:2003/03/28 16:23:43]/PhotosXXX1.exe detected malware 'Hoax.Win32.BadJoke.Formatter' 06/12/2008 08:04:36 Email message attachment: Identité principale\Dossiers locaux\Éléments envoyés\[From:"MADA Mohamed" <mada@emi.ac.ma>][subject:Message is infected : Fw: Envoi d'un message : PhotosXXX][Time:2003/03/28 16:23:43]/PhotosXXX1.exe deleted 06/12/2008 08:04:36 File: c:\documents and settings\all users\application data\avg8\update\backup\avgtoolbar.dll detected adware 'not-a-virus:AdWare.Win32.MegaSearch.ad' 06/12/2008 08:05:07 File: c:\documents and settings\all users\application data\avg8\update\backup\avgtoolbar.dll deleted 06/12/2008 08:05:11 File: c:\downloads\advanced.systemcare.pro.3.0.0.586.rar/Advanced.SystemCare.Pro.3.0.0.586\asc-setup.rar/asc-setup\asc-setup.EXE//data0000.cab/is165410.exe detected Trojan program 'Trojan-Dropper.Win32.Agent.zsb' 06/12/2008 08:05:43 File: c:\downloads\advanced.systemcare.pro.3.0.0.586.rar/Advanced.SystemCare.Pro.3.0.0.586\asc-setup.rar/asc-setup\asc-setup.EXE deleted 06/12/2008 08:05:43 File: c:\system volume information\_restore{4246ba1d-f8c9-4329-b08b-871a55d4296c}\rp1\a0000029.dll detected adware 'not-a-virus:AdWare.Win32.MegaSearch.ad' 06/12/2008 08:05:44 File: c:\system volume information\_restore{4246ba1d-f8c9-4329-b08b-871a55d4296c}\rp1\a0000029.dll deleted 06/12/2008 08:05:45 File: d:\documents\mes documents\download\mccabe__smith__harriot__7th_edition__solution_manual.rar/McCabe, Smith, Harriot (7th Edition) Solution manual\setup.exe detected virus 'Worm.Win32.AutoRun.dye' 06/12/2008 08:06:07 File: d:\documents\mes documents\download\mccabe__smith__harriot__7th_edition__solution_manual.rar/McCabe, Smith, Harriot (7th Edition) Solution manual\setup.exe deleted 06/12/2008 08:06:57 File: d:\doc_c_2\program files\emule\incoming\avg internet 8.0.156 keygen.exe/setup2.exe//data0002 detected adware 'not-a-virus:AdWare.Win32.Agent.fps' 06/12/2008 08:07:00 File: d:\doc_c_2\program files\emule\incoming\avg internet 8.0.156 keygen.exe deleted 06/12/2008 08:07:00 File: f:\jdwx.exe detected Trojan program 'Trojan-PSW.Win32.OnLineGames.aleu' 06/12/2008 08:07:01 File: f:\jdwx.exe deleted 06/12/2008 08:07:01 File: f:\lgrncie.bat detected Trojan program 'Trojan-PSW.Win32.OnLineGames.amuy' 06/12/2008 08:07:01 File: f:\lgrncie.bat deleted 06/12/2008 08:07:01 File: f:\start.exe detected Trojan program 'Trojan-Spy.Win32.VB.ahf' 06/12/2008 08:07:01 File: f:\start.exe deleted 06/12/2008 08:07:01 File: f:\recycler\s-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe detected Trojan program 'Trojan-Banker.Win32.Banbra.ceh' 06/12/2008 08:07:01 File: f:\recycler\s-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe deleted 06/12/2008 08:07:01 File: j:\ceb6eu98.bat detected Trojan program 'Packed.Win32.Krap.b' 06/12/2008 13:13:22 File: j:\ceb6eu98.bat deleted 06/12/2008 13:13:22 File: j:\ln9.exe detected virus 'Worm.Win32.AutoRun.szn' 06/12/2008 13:13:23 File: j:\ln9.exe deleted 06/12/2008 13:13:23 File: j:\mada (g)\x.com detected Trojan program 'Trojan-GameThief.Win32.OnLineGames.rbj' 06/12/2008 13:13:23 File: j:\mada (g)\x.com deleted 06/12/2008 13:13:23 File: j:\mada (g)\b.com detected Trojan program 'Trojan-GameThief.Win32.Magania.aiyc' 06/12/2008 13:13:23 File: j:\mada (g)\b.com deleted 06/12/2008 13:13:23 File: j:\mada (g)\x.bat detected Trojan program 'Trojan-GameThief.Win32.Magania.ajhv' 06/12/2008 13:13:24 File: j:\mada (g)\x.bat deleted 06/12/2008 13:13:24 File: j:\mada (g)\i.exe detected Trojan program 'Packed.Win32.Krap.b' 06/12/2008 13:13:31 File: j:\mada (g)\i.exe deleted 06/12/2008 13:13:31 File: j:\mada (g)\ogcikeq.com detected Trojan program 'Trojan-GameThief.Win32.Magania.akcs' 06/12/2008 13:13:31 File: j:\mada (g)\ogcikeq.com deleted 06/12/2008 13:13:31 File: j:\mada (g)\ceb6eu98.bat detected Trojan program 'Packed.Win32.Krap.b' 06/12/2008 13:13:37 File: j:\mada (g)\ceb6eu98.bat deleted Statistics ---------- Object Scanned Detected Untreated Deleted Moved to Quarantine Archives Packed files Password protected Corrupted ------ ------- -------- --------- ------- ------------------- -------- ------------ ------------------ --------- Settings -------- Parameter Value --------- ----- Security Level Recommended Action Prompt for action when the scan is complete Run mode Manually File types Scan all files Scan only new and changed files No Scan archives All Scan embedded OLE objects All Skip if object is larger than No Skip if scan takes longer than No Parse email formats No Scan password-protected archives No Enable iChecker technology No Enable iSwift technology No Show detected threats on "Detected" tab Yes Rootkits search Yes Deep rootkits search No Use heuristic analyzer Yes Quarantine ---------- Status Object Size Added ------ ------ ---- ----- Backup ------ Status Object Size ------ ------ ----

Tu es un ange apollo, je te remercie infinement

Grand GR GR ...... merci apollo je te dresse le rapport de combofix: ComboFix 08-12-04.04 - Administrateur 2008-12-04 22:07:47.11 - FAT32x86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.202 [GMT 0:00] Lancé depuis: c:\documents and settings\Administrateur\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\lsprst7.dll c:\windows\system32\mfc45.dll c:\windows\system32\ssprs.dll J:\autorun.inf J:\qquq.bat . ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-04 au 2008-12-04 )))))))))))))))))))))))))))))))))))) . 2008-12-03 17:37 . 2008-12-03 17:37 <REP> d-------- c:\program files\Ares 2008-12-03 17:37 . 2008-12-03 17:37 <REP> d-------- c:\program files\Ares 2008-11-30 22:43 . 2008-11-30 22:43 <REP> d--hs---- C:\FOUND.005 2008-11-30 19:55 . 2008-11-30 19:55 <REP> d-------- c:\windows\Sun 2008-11-30 19:48 . 2008-11-30 19:48 <REP> d-------- c:\program files\NOS 2008-11-30 19:48 . 2008-11-30 19:48 <REP> d-------- c:\program files\NOS 2008-11-30 19:48 . 2008-11-30 19:48 <REP> d-------- c:\documents and settings\All Users\Application Data\NOS 2008-11-30 18:20 . 2008-11-10 05:43 410,984 --a------ c:\windows\system32\deploytk.dll 2008-11-29 20:57 . 2008-10-22 16:10 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2008-11-29 20:24 . 2008-11-29 20:24 <REP> d-------- C:\ToolBar SD 2008-11-28 22:59 . 2008-11-28 22:59 <REP> d-------- c:\windows\system32\oobe 2008-11-28 00:22 . 79,570 c:\windows\system32\drivers\926d8472.sys 2008-11-27 00:45 . 2008-06-25 13:58 1,209,584 --a------ c:\documents and settings\Administrateur\CCleaner.exe 2008-11-27 00:45 . 2008-07-13 00:48 114,509 --a------ c:\documents and settings\Administrateur\uninst.exe 2008-11-27 00:26 . 2008-11-27 00:26 <REP> d-------- c:\windows\system32\drivers\Avg 2008-11-27 00:26 . 2008-11-27 00:26 <REP> d-------- c:\documents and settings\Administrateur\Application Data\AVGTOOLBAR 2008-11-27 00:26 . 2008-11-28 18:49 98,440 --a------ c:\windows\system32\drivers\avgldx86.sys 2008-11-27 00:26 . 2008-11-28 18:50 90,632 --a------ c:\windows\system32\drivers\avgtdix.sys 2008-11-27 00:26 . 2008-11-28 18:49 12,936 --a------ c:\windows\system32\drivers\avgrkx86.sys 2008-11-27 00:26 . 2008-11-28 18:49 10,520 --a------ c:\windows\system32\avgrsstx.dll 2008-11-26 23:13 . 2008-11-26 23:13 <REP> d--hs---- C:\FOUND.004 2008-11-26 22:30 . 2008-11-26 22:30 <REP> d--hs---- C:\FOUND.003 2008-11-26 18:47 . 2008-11-26 18:47 406 --a------ c:\windows\system32\ioloBootDefrag.cfg 2008-11-26 00:50 . 2008-11-26 17:29 432 --a------ c:\windows\system32\iolo.ini 2008-11-26 00:36 . 2008-11-26 00:36 <REP> d--hs---- C:\FOUND.002 2008-11-26 00:23 . 2008-11-26 00:23 <REP> d-------- c:\documents and settings\LocalService\Application Data\iolo 2008-11-26 00:23 . 2008-08-26 15:23 118,784 --a------ c:\windows\system32\iavlsp.dll 2008-11-26 00:17 . 2008-11-26 00:17 <REP> d-------- c:\documents and settings\All Users\Application Data\Avg8 2008-11-26 00:12 . 2008-11-26 00:12 <REP> d-------- c:\documents and settings\All Users\Application Data\iolo 2008-11-26 00:12 . 2008-11-26 00:12 <REP> d-------- c:\documents and settings\Administrateur\Application Data\iolo 2008-11-24 19:27 . 2008-11-24 19:27 <REP> d-------- C:\!KillBox 2008-11-23 00:05 . 2008-11-23 00:05 <REP> d-------- c:\program files\a-squared Free 2008-11-23 00:05 . 2008-11-23 00:05 <REP> d-------- c:\program files\a-squared Free 2008-11-22 22:08 . 2008-11-22 22:08 <REP> d-------- C:\totalcmd 2008-11-22 22:08 . 2008-11-25 22:45 787 --a------ c:\windows\wincmd.ini 2008-11-22 22:08 . 2008-08-08 07:04 545 --a------ c:\windows\UC.PIF 2008-11-22 22:08 . 2008-08-08 07:04 545 --a------ c:\windows\RAR.PIF 2008-11-22 22:08 . 2008-08-08 07:04 545 --a------ c:\windows\PKZIP.PIF 2008-11-22 22:08 . 2008-08-08 07:04 545 --a------ c:\windows\PKUNZIP.PIF 2008-11-22 22:08 . 2008-08-08 07:04 545 --a------ c:\windows\NOCLOSE.PIF 2008-11-22 22:08 . 2008-08-08 07:04 545 --a------ c:\windows\LHA.PIF 2008-11-22 22:08 . 2008-08-08 07:04 545 --a------ c:\windows\ARJ.PIF 2008-11-20 23:36 . 2008-11-20 23:36 <REP> d--hs---- C:\FOUND.001 2008-11-20 23:15 . 2008-11-20 23:15 <REP> d-------- c:\program files\East-Tec Eraser 2007 2008-11-20 23:15 . 2008-11-20 23:15 <REP> d-------- c:\program files\East-Tec Eraser 2007 2008-11-20 21:53 . 2008-11-20 21:53 <REP> d-------- c:\program files\Lucky18 Casino 2008-11-20 21:53 . 2008-11-20 21:53 <REP> d-------- c:\program files\Lucky18 Casino 2008-11-19 23:12 . 2008-11-19 23:12 <REP> d-------- c:\program files\Sony Ericsson Shared 2008-11-19 23:12 . 2008-11-19 23:12 <REP> d-------- c:\program files\Sony Ericsson 2008-11-19 23:12 . 2008-11-19 23:12 <REP> d-------- c:\program files\Sony Ericsson Shared 2008-11-19 23:12 . 2008-11-19 23:12 <REP> d-------- c:\program files\Sony Ericsson 2008-11-18 23:02 . 2008-11-18 23:02 <REP> d-------- c:\program files\Panasonic 2008-11-18 23:02 . 2008-11-18 23:02 <REP> d-------- c:\program files\Panasonic 2008-11-18 23:02 . 2006-02-27 11:45 36,864 --a------ c:\windows\system32\SDDEVMGR.dll 2008-11-18 22:47 . 2008-11-18 22:47 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Desktopicon 2008-11-18 21:02 . 2008-11-18 21:03 <REP> d-------- C:\DriveKey 2008-11-18 13:58 . 2008-12-04 22:10 0 --a------ c:\windows\system.ini 2008-11-18 00:11 . 2008-11-18 00:11 <REP> d-------- c:\documents and settings\Administrateur\WINDOWS 2008-11-18 00:11 . 1999-03-23 01:12 299,520 --a------ c:\windows\uninst.exe 2008-11-17 23:25 . 2008-11-17 23:25 <REP> d-------- c:\program files\Runtime Software 2008-11-17 23:25 . 2008-11-17 23:25 <REP> d-------- c:\program files\Runtime Software 2008-11-17 22:31 . 2008-11-17 22:31 <REP> d-------- c:\documents and settings\Administrateur\Application Data\IObit 2008-11-17 22:24 . 2008-11-17 22:24 <REP> d-------- c:\documents and settings\All Users\Application Data\TEMP 2008-11-17 22:23 . 2008-11-17 22:23 <REP> d-------- c:\program files\Registry Mechanic 2008-11-16 22:21 . 2008-11-16 22:21 <REP> d-------- c:\program files\Teleca Shared 2008-11-16 22:21 . 2008-11-16 22:21 <REP> d-------- c:\program files\Teleca Shared 2008-11-14 22:56 . 2008-11-14 22:56 <REP> d--hs---- C:\FOUND.000 2008-11-14 15:05 . 2008-11-14 15:05 963,054 --a------ c:\windows\system32\moitié.bmp 2008-11-14 00:30 . 2008-11-14 00:30 <REP> d-------- c:\program files\MSXML 4.0 2008-11-14 00:30 . 2008-11-14 00:30 <REP> d-------- c:\program files\MSXML 4.0 2008-11-12 22:03 . 2008-11-12 22:03 <REP> d-------- c:\program files\Mozilla Firefox 2008-11-12 22:03 . 2008-11-12 22:03 0 --a------ c:\windows\nsreg.dat 2008-11-11 23:09 . 2008-11-11 23:09 <REP> d-------- c:\program files\easyMule 2008-11-11 23:09 . 2008-11-11 23:09 <REP> d-------- c:\program files\easyMule 2008-11-11 20:07 . 2008-10-24 11:21 455,296 --------- c:\windows\system32\dllcache\mrxsmb.sys 2008-11-11 20:06 . 2008-09-04 17:16 1,106,944 --------- c:\windows\system32\dllcache\msxml3.dll 2008-11-07 00:28 . 2008-11-07 00:28 <REP> d-------- c:\windows\system32\RNBOSENT 2008-11-07 00:19 . 1998-12-01 12:18 297,984 --------- c:\windows\system32\icapinc.dll 2008-11-07 00:18 . 2008-11-07 00:18 <REP> d-------- c:\program files\Rainbow Technologies 2008-11-07 00:18 . 2008-11-07 00:18 <REP> d-------- c:\program files\Rainbow Technologies 2008-11-07 00:17 . 2008-11-07 00:17 <REP> d-------- c:\program files\Hyprotech 2008-11-07 00:17 . 2008-11-07 00:17 <REP> d-------- c:\program files\Hyprotech 2008-11-07 00:15 . 2008-11-07 00:15 1,025 --a------ c:\windows\system32\sysprs7.tgz 2008-11-07 00:15 . 2008-11-07 00:15 1,025 --a------ c:\windows\system32\sysprs7.dll 2008-11-07 00:15 . 2008-11-07 00:15 1,025 --a------ c:\windows\system32\clauth2.dll 2008-11-07 00:15 . 2008-11-07 00:15 1,025 --a------ c:\windows\system32\clauth1.dll 2008-11-07 00:15 . 2008-11-07 00:36 219 --a------ c:\windows\system32\lsprst7.tgz 2008-11-07 00:15 . 2008-11-07 00:36 87 --a------ c:\windows\system32\ssprs.tgz 2008-11-05 23:37 . 2008-11-05 23:40 2,498 --a------ c:\windows\AspenPlus111.MIF 2008-11-05 23:35 . 2008-11-05 23:36 2,498 --a------ c:\windows\APrSystem.MIF 2008-11-05 23:34 . 2008-11-05 23:34 <REP> d-------- c:\program files\Microsoft Corporation 2008-11-05 23:34 . 2008-11-05 23:34 <REP> d-------- c:\program files\Microsoft Corporation 2008-11-05 23:34 . 1997-06-30 07:02 748,528 -ra------ c:\windows\system32\ssdatb32.ocx 2008-11-05 23:34 . 1999-06-04 16:34 465,920 -ra------ c:\windows\system32\Sstabs32.ocx 2008-11-05 23:34 . 1998-12-23 14:21 377,624 -ra------ c:\windows\system32\SSTBars.ocx 2008-11-05 23:34 . 2000-12-11 22:29 340,960 -ra------ c:\windows\system32\SSTree.ocx 2008-11-05 23:34 . 1999-08-11 08:13 65,536 --a------ c:\windows\system32\JETCOMP.exe 2008-11-05 23:34 . 2000-10-20 06:05 25,088 -ra------ c:\windows\system32\msxml3a.dll 2008-11-05 23:34 . 2008-11-05 23:34 1,842 --a------ c:\windows\aspmdac.mif 2008-11-05 23:34 . 2008-11-05 23:34 1,833 --a------ c:\windows\aspReplaceDAO.mif 2008-11-05 23:34 . 2008-11-05 23:34 1,826 --a------ c:\windows\aspmsxml3.mif 2008-11-05 23:34 . 2008-11-05 23:34 1,824 --a------ c:\windows\aspDesig.mif 2008-11-05 23:33 . 2000-02-03 15:59 1,238,800 -ra------ c:\windows\system32\Msjt4jlt.dll 2008-11-05 23:33 . 2008-04-13 19:33 487,424 --a------ c:\windows\system32\dllcache\oledb32.dll 2008-11-05 23:33 . 1998-04-25 01:08 368,912 -ra------ c:\windows\system32\vbar332.dll 2008-11-05 23:33 . 1999-06-14 11:32 202,752 -ra------ c:\windows\system32\D2hlnk32.dll 2008-11-05 23:33 . 2000-01-26 19:35 118,248 -ra------ c:\windows\system32\msadodc.ocx 2008-11-05 23:33 . 1998-05-14 07:00 72,704 -ra------ c:\windows\system32\Odbctl32.dll 2008-11-05 23:33 . 1999-06-14 11:32 39,936 -ra------ c:\windows\system32\D2htls32.dll 2008-11-05 23:33 . 2008-11-05 23:33 1,824 --a------ c:\windows\aspdao.mif 2008-11-05 23:33 . 2008-11-05 23:33 1,821 --a------ c:\windows\aspdochlp.mif 2008-11-05 23:32 . 2008-11-05 23:32 <REP> d-------- c:\program files\Cape-Open 2008-11-05 23:32 . 2008-11-05 23:32 <REP> d-------- c:\program files\Cape-Open 2008-11-05 23:32 . 2008-11-05 23:32 2,498 --a------ c:\windows\AESCommon.MIF 2008-11-05 23:32 . 2008-11-05 23:32 1,812 --a------ c:\windows\aspLM.mif 2008-11-05 23:31 . 2008-11-05 23:31 <REP> d-------- c:\program files\Microsoft Office 2008-11-05 23:31 . 2001-04-18 04:53 438,272 -ra------ c:\windows\system32\Dformd.dll 2008-11-05 23:31 . 2001-04-18 04:53 434,176 -ra------ c:\windows\system32\Dforrt.dll 2008-11-05 23:31 . 2008-11-05 23:31 2,513 --a------ c:\windows\VBA.MIF 2008-11-05 23:31 . 2008-11-05 23:31 1,841 --a------ c:\windows\aspfortran.mif 2008-11-05 23:29 . 2008-11-05 23:29 <REP> d-------- c:\program files\Jetstream Shared 2008-11-05 23:29 . 2008-11-05 23:29 <REP> d-------- c:\program files\Jetstream Shared 2008-11-05 23:29 . 2000-12-18 03:25 685,936 -ra------ c:\windows\system32\ActBar2.ocx 2008-11-05 23:29 . 1999-10-27 11:02 340,480 -ra------ c:\windows\system32\ActBar.ocx 2008-11-05 23:29 . 1999-10-19 02:11 251,216 -ra------ c:\windows\system32\XceedZip.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-11-05 23:25 --------- d-----w c:\program files\Designer 2008-11-01 01:22 --------- d-----w c:\program files\Hyperdyne Software 2008-11-01 01:22 --------- d-----w c:\program files\\Hyperdyne Software 2008-10-29 23:01 --------- d-----w c:\program files\Angel Martin 2008-10-29 23:01 --------- d-----w c:\program files\\Angel Martin 2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys 2008-10-22 16:10 15,504 ----a-w c:\windows\system32\drivers\mbam.sys 2008-10-17 20:46 --------- d-----w c:\program files\HSDPA USB MODEM 2008-10-17 20:46 --------- d-----w c:\program files\\HSDPA USB MODEM 2008-10-16 14:13 202,776 ----a-w c:\windows\system32\wuweb.dll 2008-10-16 14:13 202,776 ----a-w c:\windows\system32\dllcache\wuweb.dll 2008-10-16 14:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll 2008-10-16 14:13 1,809,944 ----a-w c:\windows\system32\dllcache\wuaueng.dll 2008-10-16 14:12 561,688 ----a-w c:\windows\system32\wuapi.dll 2008-10-16 14:12 561,688 ----a-w c:\windows\system32\dllcache\wuapi.dll 2008-10-16 14:12 323,608 ----a-w c:\windows\system32\wucltui.dll 2008-10-16 14:12 323,608 ----a-w c:\windows\system32\dllcache\wucltui.dll 2008-10-16 14:09 92,696 ----a-w c:\windows\system32\dllcache\cdm.dll 2008-10-16 14:09 92,696 ----a-w c:\windows\system32\cdm.dll 2008-10-16 14:09 51,224 ----a-w c:\windows\system32\wuauclt.exe 2008-10-16 14:09 51,224 ----a-w c:\windows\system32\dllcache\wuauclt.exe 2008-10-16 14:09 43,544 ----a-w c:\windows\system32\wups2.dll 2008-10-16 14:08 34,328 ----a-w c:\windows\system32\wups.dll 2008-10-16 14:08 34,328 ----a-w c:\windows\system32\dllcache\wups.dll 2008-10-16 14:06 268,648 ----a-w c:\windows\system32\mucltui.dll 2008-10-16 14:06 208,744 ----a-w c:\windows\system32\muweb.dll 2008-10-15 16:35 337,408 ------w c:\windows\system32\dllcache\netapi32.dll 2008-09-30 16:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll 2008-09-26 00:19 139,591,348 ----a-w c:\documents and settings\Administrateur\TRACE_BOOT+DRIVERS_1_1.BIN 2008-09-16 18:10 358 ----a-w c:\program files\Raccourci vers Dofus.lnk 2008-09-16 18:10 358 ----a-w c:\program files\\Raccourci vers Dofus.lnk 2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys 2008-09-15 15:26 1,846,528 ------w c:\windows\system32\dllcache\win32k.sys 2008-09-10 01:15 1,307,648 ------w c:\windows\system32\msxml6.dll 2008-09-10 01:15 1,307,648 ------w c:\windows\system32\dllcache\msxml6.dll 2008-09-08 10:41 333,824 ------w c:\windows\system32\dllcache\srv.sys 2008-09-04 17:16 1,106,944 ----a-w c:\windows\system32\msxml3.dll 2008-04-01 00:14 22,040 ----a-w c:\documents and settings\Administrateur\Application Data\multico.dat 2008-03-29 22:27 15,397 ----a-w c:\program files\settings.dat 2008-03-29 22:27 15,397 ----a-w c:\program files\\settings.dat 2004-01-25 04:48 1,004,712 ----a-w c:\documents and settings\Administrateur\wrar330.exe 2008-04-01 00:12 1,079,842 --sha-w c:\windows\system32\1012\hamd.dat . ((((((((((((((((((((((((((((( snapshot_2008-07-17_23.34.29.25 ))))))))))))))))))))))))))))))))))))))))) . + 2008-05-02 13:44:40 83,968 ------w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll + 2007-11-30 12:39:30 18,296 ------w c:\windows\$hf_mig$\KB946648\spmsg.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$hf_mig$\KB946648\spuninst.exe + 2007-11-30 12:39:30 26,488 ------w c:\windows\$hf_mig$\KB946648\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ------w c:\windows\$hf_mig$\KB946648\update\update.exe + 2007-11-30 12:39:32 406,392 ------w c:\windows\$hf_mig$\KB946648\update\updspapi.dll + 2008-07-07 20:24:12 253,952 ------w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll + 2007-11-30 12:39:30 18,296 ------w c:\windows\$hf_mig$\KB950974\spmsg.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$hf_mig$\KB950974\spuninst.exe + 2007-11-30 12:39:30 26,488 ------w c:\windows\$hf_mig$\KB950974\update\spcustom.dll + 2007-11-30 12:39:26 767,352 ------w c:\windows\$hf_mig$\KB950974\update\update.exe + 2007-11-30 12:39:30 406,392 ------w c:\windows\$hf_mig$\KB950974\update\updspapi.dll + 2008-04-12 00:23:04 691,712 ------w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll + 2007-11-30 12:39:30 18,296 ------w c:\windows\$hf_mig$\KB951066\spmsg.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$hf_mig$\KB951066\spuninst.exe + 2007-11-30 12:39:30 26,488 ------w c:\windows\$hf_mig$\KB951066\update\spcustom.dll + 2007-12-03 15:25:44 767,352 ------w c:\windows\$hf_mig$\KB951066\update\update.exe + 2007-11-30 12:39:32 406,392 ------w c:\windows\$hf_mig$\KB951066\update\updspapi.dll + 2008-07-11 12:51:52 62,976 ------w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe + 2007-11-30 11:19:06 18,296 ------w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe + 2007-11-30 11:19:06 26,488 ------w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ------w c:\windows\$hf_mig$\KB951072-v2\update\update.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll + 2008-05-07 09:07:24 135,168 ------w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe + 2008-05-09 10:51:46 512,000 ------w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll + 2008-05-09 10:51:46 180,224 ------w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll + 2008-05-09 10:51:46 172,032 ------w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll + 2008-05-09 10:51:46 430,080 ------w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll + 2008-05-08 11:24:44 155,648 ------w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe + 2008-05-09 10:51:46 90,112 ------w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll + 2007-11-30 12:39:30 18,296 ------w c:\windows\$hf_mig$\KB951978\spmsg.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$hf_mig$\KB951978\spuninst.exe + 2007-11-30 12:39:30 26,488 ------w c:\windows\$hf_mig$\KB951978\update\spcustom.dll + 2007-11-30 12:39:26 767,352 ------w c:\windows\$hf_mig$\KB951978\update\update.exe + 2007-11-30 12:39:30 406,392 ------w c:\windows\$hf_mig$\KB951978\update\updspapi.dll + 2008-06-24 16:53:52 74,240 ------w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll + 2007-11-30 11:19:06 18,296 ------w c:\windows\$hf_mig$\KB952954\spmsg.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$hf_mig$\KB952954\spuninst.exe + 2007-11-30 11:19:06 26,488 ------w c:\windows\$hf_mig$\KB952954\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ------w c:\windows\$hf_mig$\KB952954\update\update.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$hf_mig$\KB952954\update\updspapi.dll + 2008-06-25 09:56:28 3,088,896 ------w c:\windows\$hf_mig$\KB953838\SP3QFE\mshtml.dll + 2008-06-26 08:00:28 1,499,648 ------w c:\windows\$hf_mig$\KB953838\SP3QFE\shdocvw.dll + 2008-06-26 08:00:28 620,544 ------w c:\windows\$hf_mig$\KB953838\SP3QFE\urlmon.dll + 2008-06-23 14:56:26 670,720 ------w c:\windows\$hf_mig$\KB953838\SP3QFE\wininet.dll + 2007-11-30 12:39:30 18,296 ------w c:\windows\$hf_mig$\KB953838\spmsg.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$hf_mig$\KB953838\spuninst.exe + 2007-11-30 12:39:30 26,488 ------w c:\windows\$hf_mig$\KB953838\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ------w c:\windows\$hf_mig$\KB953838\update\update.exe + 2007-12-03 15:25:44 406,392 ------w c:\windows\$hf_mig$\KB953838\update\updspapi.dll + 2007-11-30 11:19:06 18,296 ------w c:\windows\$hf_mig$\KB953839\spmsg.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$hf_mig$\KB953839\spuninst.exe + 2007-11-30 11:19:06 26,488 ------w c:\windows\$hf_mig$\KB953839\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ------w c:\windows\$hf_mig$\KB953839\update\update.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$hf_mig$\KB953839\update\updspapi.dll + 2008-09-15 15:20:40 1,847,040 ------w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys + 2007-11-30 12:39:30 18,296 ------w c:\windows\$hf_mig$\KB954211\spmsg.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$hf_mig$\KB954211\spuninst.exe + 2007-11-30 12:39:30 26,488 ------w c:\windows\$hf_mig$\KB954211\update\spcustom.dll + 2008-07-09 07:40:26 767,352 ------w c:\windows\$hf_mig$\KB954211\update\update.exe + 2007-11-30 12:39:32 406,392 ------w c:\windows\$hf_mig$\KB954211\update\updspapi.dll + 2008-08-20 05:07:32 3,088,896 ------w c:\windows\$hf_mig$\KB956390\SP3QFE\mshtml.dll + 2008-08-20 05:07:28 1,499,648 ------w c:\windows\$hf_mig$\KB956390\SP3QFE\shdocvw.dll + 2008-08-20 05:07:28 621,056 ------w c:\windows\$hf_mig$\KB956390\SP3QFE\urlmon.dll + 2008-08-20 05:07:28 670,720 ------w c:\windows\$hf_mig$\KB956390\SP3QFE\wininet.dll + 2007-11-30 11:19:06 18,296 ------w c:\windows\$hf_mig$\KB956390\spmsg.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$hf_mig$\KB956390\spuninst.exe + 2007-11-30 11:19:06 26,488 ------w c:\windows\$hf_mig$\KB956390\update\spcustom.dll + 2007-11-30 12:39:30 767,352 ------w c:\windows\$hf_mig$\KB956390\update\update.exe + 2007-11-30 12:39:32 406,392 ------w c:\windows\$hf_mig$\KB956390\update\updspapi.dll + 2007-11-30 12:39:30 18,296 ------w c:\windows\$hf_mig$\KB956391\spmsg.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$hf_mig$\KB956391\spuninst.exe + 2007-11-30 12:39:30 26,488 ------w c:\windows\$hf_mig$\KB956391\update\spcustom.dll + 2007-11-30 12:39:30 767,352 ------w c:\windows\$hf_mig$\KB956391\update\update.exe + 2007-11-30 12:39:32 406,392 ------w c:\windows\$hf_mig$\KB956391\update\updspapi.dll + 2008-08-14 10:34:26 138,496 ------w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys + 2007-11-30 11:19:06 18,296 ------w c:\windows\$hf_mig$\KB956803\spmsg.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$hf_mig$\KB956803\spuninst.exe + 2007-11-30 11:19:06 26,488 ------w c:\windows\$hf_mig$\KB956803\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ------w c:\windows\$hf_mig$\KB956803\update\update.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$hf_mig$\KB956803\update\updspapi.dll + 2008-08-14 13:55:54 2,147,328 ------w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe + 2008-08-14 19:26:00 2,068,096 ------w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe + 2008-08-14 13:55:48 2,025,984 ------w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe + 2008-08-14 19:26:02 2,191,232 ------w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe + 2007-11-30 11:19:06 18,296 ------w c:\windows\$hf_mig$\KB956841\spmsg.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$hf_mig$\KB956841\spuninst.exe + 2007-11-30 11:19:06 26,488 ------w c:\windows\$hf_mig$\KB956841\update\spcustom.dll + 2007-11-30 12:39:30 767,352 ------w c:\windows\$hf_mig$\KB956841\update\update.exe + 2008-07-09 07:40:36 406,392 ------w c:\windows\$hf_mig$\KB956841\update\updspapi.dll + 2008-09-08 11:37:20 333,824 ------w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys + 2007-11-30 11:19:06 18,296 ------w c:\windows\$hf_mig$\KB957095\spmsg.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$hf_mig$\KB957095\spuninst.exe + 2007-11-30 11:19:06 26,488 ------w c:\windows\$hf_mig$\KB957095\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ------w c:\windows\$hf_mig$\KB957095\update\update.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$hf_mig$\KB957095\update\updspapi.dll + 2008-10-15 16:31:32 339,456 ------w c:\windows\$hf_mig$\KB958644\SP3QFE\netapi32.dll + 2007-11-30 11:19:06 18,296 ------w c:\windows\$hf_mig$\KB958644\spmsg.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$hf_mig$\KB958644\spuninst.exe + 2007-11-30 11:19:06 26,488 ------w c:\windows\$hf_mig$\KB958644\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ------w c:\windows\$hf_mig$\KB958644\update\update.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$hf_mig$\KB958644\update\updspapi.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$NtUninstallKB938464$\spuninst\spuninst.exe + 2007-11-30 12:39:32 406,392 ------w c:\windows\$NtUninstallKB938464$\spuninst\updspapi.dll + 2008-04-13 19:33:32 82,944 ------w c:\windows\$NtUninstallKB946648$\msgsc.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$NtUninstallKB946648$\spuninst\spuninst.exe + 2007-11-30 12:39:32 406,392 ------w c:\windows\$NtUninstallKB946648$\spuninst\updspapi.dll + 2008-04-13 19:33:26 246,272 ------w c:\windows\$NtUninstallKB950974$\es.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$NtUninstallKB950974$\spuninst\spuninst.exe + 2007-11-30 12:39:30 406,392 ------w c:\windows\$NtUninstallKB950974$\spuninst\updspapi.dll + 2008-04-13 19:33:28 691,712 ------w c:\windows\$NtUninstallKB951066$\inetcomm.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$NtUninstallKB951066$\spuninst\spuninst.exe + 2007-11-30 12:39:32 406,392 ------w c:\windows\$NtUninstallKB951066$\spuninst\updspapi.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$NtUninstallKB951072-v2$\spuninst\spuninst.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$NtUninstallKB951072-v2$\spuninst\updspapi.dll + 2008-04-13 19:34:26 60,416 ------w c:\windows\$NtUninstallKB951072-v2$\tzchange.exe + 2008-04-13 19:34:00 139,264 ------w c:\windows\$NtUninstallKB951978$\cscript.exe + 2008-04-13 19:33:28 512,000 ------w c:\windows\$NtUninstallKB951978$\jscript.dll + 2008-04-13 19:33:42 180,224 ------w c:\windows\$NtUninstallKB951978$\scrobj.dll + 2008-04-13 19:33:42 172,032 ------w c:\windows\$NtUninstallKB951978$\scrrun.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$NtUninstallKB951978$\spuninst\spuninst.exe + 2007-11-30 12:39:30 406,392 ------w c:\windows\$NtUninstallKB951978$\spuninst\updspapi.dll + 2008-04-13 19:33:50 434,176 ------w c:\windows\$NtUninstallKB951978$\vbscript.dll + 2008-04-13 19:34:30 155,648 ------w c:\windows\$NtUninstallKB951978$\wscript.exe + 2008-04-13 19:33:52 90,112 ------w c:\windows\$NtUninstallKB951978$\wshext.dll + 2008-04-13 19:33:32 73,728 ------w c:\windows\$NtUninstallKB952954$\mscms.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$NtUninstallKB952954$\spuninst\spuninst.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$NtUninstallKB952954$\spuninst\updspapi.dll + 2008-04-21 06:43:36 3,087,872 ------w c:\windows\$NtUninstallKB953838$\mshtml.dll + 2008-04-13 19:33:42 1,499,136 ------w c:\windows\$NtUninstallKB953838$\shdocvw.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$NtUninstallKB953838$\spuninst\spuninst.exe + 2007-12-03 15:25:44 406,392 ------w c:\windows\$NtUninstallKB953838$\spuninst\updspapi.dll + 2008-04-13 19:33:50 621,568 ------w c:\windows\$NtUninstallKB953838$\urlmon.dll + 2008-04-21 06:43:36 670,208 ------w c:\windows\$NtUninstallKB953838$\wininet.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$NtUninstallKB953839$\spuninst\spuninst.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$NtUninstallKB953839$\spuninst\updspapi.dll + 2007-07-27 08:28:58 234,872 ------w c:\windows\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe + 2007-07-27 10:41:48 382,840 ------w c:\windows\$NtUninstallKB954156_WM9L$\spuninst\updspapi.dll + 2002-12-18 21:38:46 929,280 ------w c:\windows\$NtUninstallKB954156_WM9L$\wmex.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$NtUninstallKB954211$\spuninst\spuninst.exe + 2007-11-30 12:39:32 406,392 ------w c:\windows\$NtUninstallKB954211$\spuninst\updspapi.dll + 2008-04-13 18:58:08 1,845,760 ------w c:\windows\$NtUninstallKB954211$\win32k.sys + 2008-06-23 15:10:28 3,088,384 ------w c:\windows\$NtUninstallKB956390$\mshtml.dll + 2008-06-26 08:13:32 1,499,648 ------w c:\windows\$NtUninstallKB956390$\shdocvw.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$NtUninstallKB956390$\spuninst\spuninst.exe + 2007-11-30 12:39:32 406,392 ------w c:\windows\$NtUninstallKB956390$\spuninst\updspapi.dll + 2008-06-26 08:13:32 620,544 ------w c:\windows\$NtUninstallKB956390$\urlmon.dll + 2008-06-23 15:10:28 670,208 ------w c:\windows\$NtUninstallKB956390$\wininet.dll + 2007-11-30 12:39:30 234,872 ------w c:\windows\$NtUninstallKB956391$\spuninst\spuninst.exe + 2007-11-30 12:39:32 406,392 ------w c:\windows\$NtUninstallKB956391$\spuninst\updspapi.dll + 2008-06-20 11:40:08 138,496 ------w c:\windows\$NtUninstallKB956803$\afd.sys + 2007-11-30 11:19:06 234,872 ------w c:\windows\$NtUninstallKB956803$\spuninst\spuninst.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$NtUninstallKB956803$\spuninst\updspapi.dll + 2008-04-13 19:07:28 2,067,968 ------w c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe + 2008-04-13 19:08:04 2,191,104 ------w c:\windows\$NtUninstallKB956841$\ntoskrnl.exe + 2007-11-30 11:19:06 234,872 ------w c:\windows\$NtUninstallKB956841$\spuninst\spuninst.exe + 2008-07-09 07:40:36 406,392 ------w c:\windows\$NtUninstallKB956841$\spuninst\updspapi.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$NtUninstallKB957095$\spuninst\spuninst.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$NtUninstallKB957095$\spuninst\updspapi.dll + 2008-04-13 12:15:12 334,848 ------w c:\windows\$NtUninstallKB957095$\srv.sys + 2008-04-13 19:33:36 337,408 ------w c:\windows\$NtUninstallKB958644$\netapi32.dll + 2007-11-30 11:19:06 234,872 ------w c:\windows\$NtUninstallKB958644$\spuninst\spuninst.exe + 2007-11-30 11:19:10 406,392 ------w c:\windows\$NtUninstallKB958644$\spuninst\updspapi.dll + 2008-07-25 22:28:16 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll + 2008-07-25 22:28:16 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll + 2008-07-25 22:28:16 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll + 2008-07-25 22:28:18 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2008-07-25 22:28:18 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll + 2008-07-25 22:28:18 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll + 2008-07-25 22:28:18 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll + 2008-07-25 22:28:18 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll + 2008-07-25 22:28:16 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll - 2008-05-03 22:41:56 248,632 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll + 2008-08-13 23:25:22 250,928 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll - 2008-05-03 22:41:58 781,104 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll + 2008-07-25 15:48:26 783,744 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll - 2008-05-03 22:42:40 118,112 ----a-w c:\windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll + 2008-07-25 15:48:36 120,408 ----a-w c:\windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll - 2008-05-03 22:42:38 609,104 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll + 2008-07-25 15:48:34 611,392 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll - 2007-11-20 16:04:32 1,523,536 ----a-w c:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe + 2008-03-24 19:33:02 1,527,056 ----a-w c:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe + 2008-10-24 11:21:10 455,296 ------w c:\windows\Driver Cache\i386\mrxsmb.sys + 2008-08-14 13:23:44 2,147,328 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe + 2008-08-14 13:23:50 2,068,096 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe + 2008-08-14 13:23:44 2,025,984 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe + 2008-08-14 13:23:50 2,191,232 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe + 1998-09-14 18:55:38 468,248 ----a-w c:\windows\Help\hhupd.exe + 2002-09-24 00:28:16 155,969 ----a-w c:\windows\HPHins15.dat + 2007-08-28 06:45:16 2,828 ------w c:\windows\hphmdl15.dat + 2006-10-26 19:49:48 1,011,488 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090100C0400000000000F01FEC\12.0.4518\MSDAIPP.DLL + 2006-10-26 19:49:46 970,528 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090100C0400000000000F01FEC\12.0.4518\MSONSEXT.DLL + 2006-10-27 15:00:10 576,376 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACACEDAO.DLL + 2006-10-26 21:18:12 162,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACCWIZ.DLL + 2006-10-27 15:00:12 1,751,904 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACECORE.DLL + 2006-10-27 15:00:10 576,376 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEDAO.DLL + 2006-10-27 15:00:06 47,976 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEERR.DLL + 2006-10-27 15:00:08 191,360 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEES.DLL + 2006-10-26 20:13:34 338,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEEXCH.DLL + 2006-10-26 20:13:44 629,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEEXCL.DLL + 2006-10-26 20:13:28 207,736 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACELTS.DLL + 2006-10-26 20:13:32 279,352 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEODBC.DLL + 2006-10-26 20:13:08 15,160 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEODDBS.DLL + 2006-10-26 20:13:08 15,160 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEODEXL.DLL + 2006-10-26 20:13:08 15,160 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEODPDX.DLL + 2006-10-26 20:13:12 15,160 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEODTXT.DLL + 2006-10-27 15:00:06 387,960 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEOLEDB.DLL + 2006-10-26 20:13:38 392,048 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEPDE.DLL + 2006-10-26 20:13:30 260,976 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACER2X.DLL + 2006-10-26 20:13:32 289,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACER3X.DLL + 2006-10-26 20:13:20 56,120 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACERCLR.DLL + 2006-10-26 20:13:38 551,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEREP.DLL + 2006-10-26 20:13:30 224,104 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACETXT.DLL + 2006-10-27 15:40:34 208,760 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEWSS.DLL + 2006-10-26 20:13:34 371,568 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACEXBE.DLL + 2006-10-27 15:41:04 399,640 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\CDLMSO.DLL + 2006-10-26 19:59:24 205,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\CLVIEW.EXE + 2006-10-26 21:30:42 65,312 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\COLLIMP.DLL + 2006-10-26 20:12:52 189,760 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\CONTACTPICKER.DLL + 2006-10-26 19:48:14 439,568 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\DWDCW20.DLL + 2006-10-26 14:04:58 75,576 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\FORM.DLL + 2006-10-26 19:21:24 1,682,232 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\FPSRVUTL.DLL + 2006-10-27 15:09:36 983,376 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\FPWEC.DLL + 2006-10-26 20:02:12 2,526,520 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\GRAPH.EXE + 2006-10-26 20:12:52 173,328 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IEAWSDC.DLL + 2006-10-26 20:55:38 138,024 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IMPMAIL.DLL + 2006-10-27 15:10:08 1,439,032 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\INFOPATH.EXE + 2006-10-27 15:10:10 5,456,704 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IPDESIGN.DLL + 2006-10-27 15:10:10 5,281,592 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IPEDITOR.DLL + 2006-10-26 21:42:00 176,976 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IPOLK.DLL + 2008-05-03 22:42:38 609,104 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IPOMHOST.DLL + 2008-05-03 22:42:40 118,112 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IPOMINT.DLL + 2006-10-26 19:58:24 793,392 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MDIGRAPH.DLL + 2006-10-26 19:58:18 274,776 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MDIINK.DLL + 2006-10-26 19:55:10 828,704 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MEDCAT.DLL + 2006-10-27 15:01:34 10,371,880 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSACCESS.EXE + 2006-10-26 21:18:06 66,880 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSAEXP30.DLL + 2006-10-26 13:58:14 117,552 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSCONV97.DLL + 2006-10-27 14:59:06 161,080 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSOCF.DLL + 2006-10-26 19:48:12 14,664 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSOCFU.DLL + 2006-10-26 20:12:58 428,816 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSODCW.DLL + 2006-10-26 21:13:36 26,936 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSOEURO.DLL + 2006-10-26 20:00:08 6,635,320 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSORES.DLL + 2006-10-26 13:56:36 436,520 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSORUN.DLL + 2006-10-26 19:58:26 1,057,632 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSPCORE.DLL + 2006-10-26 19:58:22 772,944 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSPFILT.DLL + 2006-10-26 19:50:04 672,024 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSQRY32.EXE + 2006-10-26 13:56:40 505,136 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSSOAP30.DLL + 2006-10-26 19:55:12 832,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSTORDB.EXE + 2006-10-26 19:55:06 538,904 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSTORES.DLL + 2006-10-26 20:12:30 65,824 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\NAME.DLL + 2006-10-27 15:14:34 14,151,456 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OART.DLL + 2006-10-26 20:06:54 232,816 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ODEPLOY.EXE + 2006-10-26 20:14:06 7,033,152 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OFFOWC.DLL + 2006-10-27 15:18:36 1,658,152 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OGL.DLL + 2006-10-26 20:00:08 274,744 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OIS.EXE + 2006-10-26 20:00:12 998,208 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OISAPP.DLL + 2006-10-26 20:00:10 285,008 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OISGRAPH.DLL + 2006-10-26 13:58:40 540,008 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ORGCHART.EXE + 2006-10-26 20:07:04 6,536,992 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OSETUP.DLL + 2006-07-26 18:53:56 459,080 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OUTLFLTR.DLL + 2006-10-27 15:16:36 46,864 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OUTLRPC.DLL + 2006-10-26 21:30:44 482,088 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\PORTCONN.DLL + 2006-10-27 15:04:06 465,200 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\POWERPNT.EXE + 2006-10-27 15:04:06 7,980,848 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\PPCORE.DLL + 2008-05-03 22:41:56 248,632 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\PPTPIA.DLL + 2006-10-26 19:52:10 2,012,480 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\PPTVIEW.EXE + 2006-10-26 14:05:00 77,144 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\PSOM.DLL + 2006-10-26 21:13:38 38,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\REFEDIT.DLL + 2006-10-26 21:42:12 744,808 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\REGFORM.EXE + 2006-10-26 14:04:44 19,784 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\REVERSE.DLL + 2006-10-26 20:13:00 503,624 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\SELFCERT.EXE + 2006-10-26 20:06:58 439,600 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\SETUP.EXE + 2006-10-26 21:18:16 502,608 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\SOA.DLL + 2006-07-28 15:21:58 277,320 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\SSGEN.DLL + 2006-10-27 14:57:08 2,330,968 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\STSLIST.DLL + 2006-10-26 14:04:48 29,976 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\THOCRAPI.DLL + 2006-10-26 14:05:04 126,784 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\TWCUTCHR.DLL + 2006-10-26 14:05:02 86,840 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\TWCUTLIN.DLL + 2006-10-26 14:04:56 58,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\TWLAY32.DLL + 2006-10-26 14:04:48 27,456 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\TWORIENT.DLL + 2006-10-26 14:04:54 51,008 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\TWRECE.DLL + 2006-10-26 14:04:44 19,784 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\TWRECS.DLL + 2006-10-26 14:04:58 76,624 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\TWSTRUCT.DLL + 2006-10-26 23:00:12 1,841,984 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\VVIEWDWG.DLL + 2006-10-26 22:58:38 3,732,792 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\VVIEWER.DLL + 2008-05-03 22:41:58 781,104 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\WORDPIA.DLL + 2006-10-26 14:05:08 1,181,520 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\XIMAGE3B.DLL + 2006-10-26 14:05:08 530,760 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\XPAGE3C.DLL + 2007-09-14 21:45:58 16,901,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\MSO.DLL + 2007-08-29 00:19:24 1,654,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\OGL.DLL + 2007-08-28 23:06:16 467,840 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\POWERPNT.EXE + 2007-08-28 23:06:44 7,990,144 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\PPCORE.DLL + 2008-07-25 15:48:46 251,272 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\PPTPIA.DLL + 2007-05-09 16:19:48 2,585,936 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\VBE6.DLL + 2002-09-24 00:24:20 65,536 ----a-r c:\windows\Installer\{10E1E87C-656C-4D08-86D6-5443D28583BE}\NewShortcut1.A6CC6977_F7B4_4C0B_9510_BCD847D4BDB2.exe + 2008-11-19 23:12:58 10,134 ----a-r c:\windows\Installer\{25BEC3AB-5CD4-481D-9143-215C1BBB189E}\ARPPRODUCTICON.exe + 2008-11-19 23:12:58 5,430 ----a-r c:\windows\Installer\{25BEC3AB-5CD4-481D-9143-215C1BBB189E}\NewShortcut3_515FF21B9D144F16ACB5BA3C3F6305EE.exe + 2008-11-19 23:12:58 5,430 ----a-r c:\windows\Installer\{25BEC3AB-5CD4-481D-9143-215C1BBB189E}\NewShortcut4_528354B48E3349F28CC1F3A2D072D8CA.exe + 2008-11-19 23:12:58 26,694 ----a-r c:\windows\Installer\{25BEC3AB-5CD4-481D-9143-215C1BBB189E}\NewShortcut91_C6476810277B40B3821611D4B76B596B.exe + 2008-11-19 23:12:58 26,694 ----a-r c:\windows\Installer\{25BEC3AB-5CD4-481D-9143-215C1BBB189E}\NewShortcut911_C6476810277B40B3821611D4B76B596B.exe + 2002-09-24 00:26:40 8,854 ----a-r c:\windows\Installer\{415CDA53-9100-476F-A7B2-476691E117C7}\Uninstall_Smart_Web__2DD09EA994C6415885A0C8BB7A14CB08.exe + 2002-09-24 00:26:24 25,214 ----a-r c:\windows\Installer\{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}\ARPPRODUCTICON.exe + 2002-09-24 00:26:24 25,214 ----a-r c:\windows\Installer\{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}\hpqSSupply.exe + 2002-09-24 00:27:16 25,214 ----a-r c:\windows\Installer\{8389382B-53BA-4A87-8854-91E3D80A5AC7}\ARPPRODUCTICON.exe + 2002-09-24 00:27:16 25,214 ----a-r c:\windows\Installer\{8389382B-53BA-4A87-8854-91E3D80A5AC7}\NewShortcut1_8389382B53BA4A87885491E3D80A5AC7.exe + 2002-09-24 00:27:16 25,214 ----a-r c:\windows\Installer\{8389382B-53BA-4A87-8854-91E3D80A5AC7}\NewShortcut2_8389382B53BA4A87885491E3D80A5AC7.exe + 2008-11-14 00:30:28 32,768 ----a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe - 2008-07-09 23:42:08 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe + 2008-11-14 00:32:24 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe - 2008-07-09 23:42:08 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe + 2008-11-14 00:32:24 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe - 2008-07-09 23:42:08 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe + 2008-11-14 00:32:24 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe - 2008-07-09 23:42:08 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe + 2008-11-14 00:32:24 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe - 2008-07-09 23:42:08 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe + 2008-11-14 00:32:24 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe - 2008-07-09 23:42:08 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe + 2008-11-14 00:32:24 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe - 2008-07-09 23:42:08 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe + 2008-11-14 00:32:24 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe - 2008-07-09 23:42:08 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe + 2008-11-14 00:32:24 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe - 2008-07-09 23:42:08 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe + 2008-11-14 00:32:24 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe - 2008-07-09 23:42:08 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe + 2008-11-14 00:32:24 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe - 2008-07-09 23:42:08 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe + 2008-11-14 00:32:24 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe - 2008-05-03 22:37:20 217,864 ----a-r c:\windows\Installer\{90120000-006E-040C-0000-0000000FF1CE}\misc.exe + 2008-07-25 15:51:32 217,864 ----a-r c:\windows\Installer\{90120000-006E-040C-0000-0000000FF1CE}\misc.exe - 2008-02-27 16:59:28 123,008 ----a-r c:\windows\Installer\{A70FA218-6598-4AC9-813D-63597C5DD068}\WLXPhotoGalleryIcon.exe + 2008-08-13 00:51:50 123,008 ----a-r c:\windows\Installer\{A70FA218-6598-4AC9-813D-63597C5DD068}\WLXPhotoGalleryIcon.exe + 2002-09-24 00:26:00 65,536 ----a-r c:\windows\Installer\{AB40272D-92AB-4F30-B36B-22EDE16F8FE5}\ARPPRODUCTICON.exe + 2002-09-24 00:26:00 689,720 ----a-r c:\windows\Installer\{AB40272D-92AB-4F30-B36B-22EDE16F8FE5}\HPSUShortcut_BB85ED9CAFC943BDB8DC258C3C7DF72E.exe + 2007-12-12 15:06:42 295,606 ----a-r c:\windows\Installer\{AC76BA86-7AD7-1036-7B44-A90000000001}\SC_Reader.exe - 2002-09-24 20:09:28 29,926 ----a-r c:\windows\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe + 2008-08-13 20:27:52 29,926 ----a-r c:\windows\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe + 2007-08-15 07:19:42 2,883,992 ----a-r c:\windows\Installer\{D6BF6477-8369-489F-8DE6-3731F4B88560}\DeviceData.exe + 2007-08-15 07:19:44 3,719,080 ----a-r c:\windows\Installer\{D6BF6477-8369-489F-8DE6-3731F4B88560}\Drivers.exe + 2007-09-21 09:00:42 36,042,541 ----a-r c:\windows\Installer\{D6BF6477-8369-489F-8DE6-3731F4B88560}\PCSuite.exe + 2007-09-21 10:04:04 16,208,768 ----a-r c:\windows\Installer\{D6BF6477-8369-489F-8DE6-3731F4B88560}\PCSuitex64.exe + 2007-08-15 07:19:40 577,160 ----a-r c:\windows\Installer\{D6BF6477-8369-489F-8DE6-3731F4B88560}\Setup.exe + 2007-05-31 06:09:58 995,328 ----a-r c:\windows\Installer\{D6BF6477-8369-489F-8DE6-3731F4B88560}\SetupGraphics.dll + 2007-08-15 07:19:42 294,024 ----a-r c:\windows\Installer\{D6BF6477-8369-489F-8DE6-3731F4B88560}\SetupResources.dll + 2002-09-24 00:27:08 25,214 ----a-r c:\windows\Installer\{F72E2DDC-3DB8-4190-A21D-63883D955FE7}\ARPPRODUCTICON.exe + 2008-08-20 22:32:42 25,214 ----a-r c:\windows\Installer\{F843C6A3-224D-4615-94F8-3C461BD9AEA0}\ARPPRODUCTICON.exe + 1998-11-13 11:16:44 308,224 ----a-w c:\windows\IsUn040c.exe + 1998-10-29 16:45:06 306,688 ----a-w c:\windows\IsUninst.exe + 2005-03-18 17:23:10 53,248 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll + 2005-03-18 17:23:10 12,800 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll + 2005-03-18 17:23:14 473,600 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll + 2005-03-18 17:23:10 145,920 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.dll + 2005-03-18 17:23:10 159,232 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.dll + 2005-03-18 17:23:14 364,544 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.dll + 2005-03-18 17:23:12 178,176 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.dll + 2005-03-18 17:23:14 223,232 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.dll + 2005-09-28 14:11:52 577,536 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll + 2002-12-13 13:42:56 8,192 ----a-w c:\windows\RegisteredPackages\{3695EB93-6443-448D-8E2E-1F6F4FC79BC1}\asferror.dll + 2002-11-06 02:10:14 167,936 ----a-w c:\windows\RegisteredPackages\{89FDAB62-6F46-4C7E-A559-E00B9A0BACB6}\wmserror.dll + 2002-11-06 02:45:32 327,680 ----a-w c:\windows\RegisteredPackages\{89FDAB62-6F46-4C7E-A559-E00B9A0BACB6}\wmsservertypelib.dll + 2008-04-13 19:33:50 408,064 ----a-w c:\windows\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}$BACKUP$\System\wmadmod.dll + 2008-04-13 19:33:50 759,296 ----a-w c:\windows\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}$BACKUP$\System\wmsdmod.dll + 2008-04-13 19:33:50 485,376 ----a-w c:\windows\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}$BACKUP$\System\wmspdmod.dll + 2008-04-13 19:33:50 809,984 ----a-w c:\windows\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}$BACKUP$\System\wmvdmod.dll + 2004-08-11 01:45:04 380,144 ----a-w c:\windows\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmadmod.dll + 2004-08-11 01:45:04 773,368 ----a-w c:\windows\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmsdmod.dll + 2004-08-11 01:45:06 531,192 ----a-w c:\windows\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmspdmod.dll + 2004-08-11 01:45:06 1,181,944 ----a-w c:\windows\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmvadvd.dll + 2004-08-11 01:45:06 871,160 ----a-w c:\windows\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmvdmod.dll + 1997-07-10 18:00:00 536,048 ----a-r c:\windows\system\Oc25.dll + 2007-04-23 20:11:18 287,256 ----a-r c:\windows\system32\AbaleZip.dll + 2001-10-11 16:34:50 77,824 ----a-w c:\windows\system32\adistres.dll + 2001-03-14 13:55:40 397,312 ----a-w c:\windows\system32\Adobe\SVG Viewer\ACELite.dll + 2001-03-14 13:55:42 815,104 ----a-w c:\windows\system32\Adobe\SVG Viewer\AGM.dll + 2001-03-14 13:55:42 147,456 ----a-w c:\windows\system32\Adobe\SVG Viewer\Bib.dll + 2001-03-14 13:55:44 905,216 ----a-w c:\windows\system32\Adobe\SVG Viewer\CoolType.dll + 2001-03-14 14:10:56 299,059 ----a-w c:\windows\system32\Adobe\SVG Viewer\NPSVGVw.dll + 2001-03-14 14:14:00 491,574 ----a-w c:\windows\system32\Adobe\SVG Viewer\SVGControl.dll + 2001-03-14 14:36:56 12,288 ----a-w c:\windows\system32\Adobe\SVG Viewer\SVGRSRC.DLL + 2001-03-14 14:07:52 1,597,491 ----a-w c:\windows\system32\Adobe\SVG Viewer\SVGView.dll - 2008-04-13 18:55:02 8,704 ----a-w c:\windows\system32\asferror.dll + 2002-12-13 13:42:56 8,192 ----a-w c:\windows\system32\asferror.dll + 1998-05-30 18:00:00 140,288 ----a-r c:\windows\system32\Autprx32.dll + 1998-06-16 18:00:00 42,496 ----a-r c:\windows\system32\Clireg32.exe - 2008-04-30 21:30:22 266,240 ----a-w c:\windows\system32\config\systemprofile\ntuser.dat + 2008-07-31 00:06:26 266,240 ----a-w c:\windows\system32\config\systemprofile\ntuser.dat + 1999-10-19 02:11:38 115,712 ----a-r c:\windows\system32\Crush32.dll - 2008-04-13 19:34:00 139,264 ----a-w c:\windows\system32\cscript.exe + 2008-05-07 09:07:24 135,168 ----a-w c:\windows\system32\cscript.exe + 2005-07-22 19:59:04 2,319,568 ----a-w c:\windows\system32\d3dx9_27.dll - 2008-06-20 11:40:08 138,496 ------w c:\windows\system32\dllcache\afd.sys + 2008-08-14 10:04:36 138,496 ------w c:\windows\system32\dllcache\afd.sys - 2008-04-13 18:55:02 8,704 ----a-w c:\windows\system32\dllcache\asferror.dll + 2002-12-13 13:42:56 8,192 ----a-w c:\windows\system32\dllcache\asferror.dll + 2008-04-13 19:34:00 1,044,480 ----a-w c:\windows\system32\dllcache\conf.exe + 2008-05-07 09:07:24 135,168 ------w c:\windows\system32\dllcache\cscript.exe + 2008-07-07 20:28:20 253,952 ------w c:\windows\system32\dllcache\es.dll + 2008-04-11 19:05:22 691,712 ------w c:\windows\system32\dllcache\inetcomm.dll + 2008-05-09 10:55:00 512,000 ------w c:\windows\system32\dllcache\jscript.dll + 2008-04-13 19:34:14 3,558,912 ----a-w c:\windows\system32\dllcache\moviemk.exe + 2008-06-24 16:44:02 74,240 ------w c:\windows\system32\dllcache\mscms.dll - 2008-04-21 06:43:36 3,087,872 ------w c:\windows\system32\dllcache\mshtml.dll + 2008-08-20 05:10:12 3,088,896 ------w c:\windows\system32\dllcache\mshtml.dll + 2008-04-13 19:34:14 60,416 ----a-w c:\windows\system32\dllcache\msimn.exe + 2008-08-14 13:23:44 2,147,328 ------w c:\windows\system32\dllcache\ntkrnlmp.exe + 2008-08-14 13:23:50 2,068,096 ------w c:\windows\system32\dllcache\ntkrnlpa.exe + 2008-08-14 13:23:44 2,025,984 ------w c:\windows\system32\dllcache\ntkrpamp.exe + 2008-08-14 13:23:50 2,191,232 ------w c:\windows\system32\dllcache\ntoskrnl.exe + 2008-04-13 19:34:18 60,928 ----a-w c:\windows\system32\dllcache\oemig50.exe + 2008-05-09 10:55:00 180,224 ------w c:\windows\system32\dllcache\scrobj.dll + 2008-05-09 10:55:00 172,032 ------w c:\windows\system32\dllcache\scrrun.dll + 2008-04-13 19:34:22 73,728 ----a-w c:\windows\system32\dllcache\setup50.exe + 2008-08-20 05:10:12 1,499,648 ------w c:\windows\system32\dllcache\shdocvw.dll + 2008-08-20 05:10:12 620,544 ------w c:\windows\system32\dllcache\urlmon.dll + 2008-05-09 10:55:00 430,080 ------w c:\windows\system32\dllcache\vbscript.dll + 2008-04-13 19:34:28 46,080 ----a-w c:\windows\system32\dllcache\wab.exe - 2008-04-21 06:43:36 670,208 ------w c:\windows\system32\dllcache\wininet.dll + 2008-08-20 05:10:12 670,208 ------w c:\windows\system32\dllcache\wininet.dll - 2008-04-13 19:33:50 408,064 ----a-w c:\windows\system32\dllcache\wmadmod.dll + 2004-08-11 01:45:04 380,144 ----a-w c:\windows\system32\dllcache\wmadmod.dll - 2008-04-13 19:33:50 759,296 ----a-w c:\windows\system32\dllcache\wmsdmod.dll + 2004-08-11 01:45:04 773,368 ----a-w c:\windows\system32\dllcache\wmsdmod.dll - 2008-04-13 19:33:50 485,376 ----a-w c:\windows\system32\dllcache\wmspdmod.dll + 2004-08-11 01:45:06 531,192 ----a-w c:\windows\system32\dllcache\wmspdmod.dll - 2008-04-13 19:33:50 809,984 ----a-w c:\windows\system32\dllcache\wmvdmod.dll + 2004-08-11 01:45:06 871,160 ----a-w c:\windows\system32\dllcache\wmvdmod.dll + 2008-05-08 11:24:44 155,648 ------w c:\windows\system32\dllcache\wscript.exe + 2008-05-09 10:55:00 90,112 ------w c:\windows\system32\dllcache\wshext.dll - 2008-06-20 11:40:08 138,496 ----a-w c:\windows\system32\drivers\afd.sys + 2008-08-14 10:04:36 138,496 ----a-w c:\windows\system32\drivers\afd.sys + 2008-11-28 18:49:34 26,824 ----a-w c:\windows\system32\drivers\avgmfx86.sys + 2007-10-16 11:40:50 97,408 ----a-w c:\windows\system32\drivers\cmusbser.sys + 2001-06-22 05:39:02 73,728 ----a-w c:\windows\system32\drivers\sentinel.sys + 2008-08-24 00:36:10 717,296 ----a-w c:\windows\system32\drivers\sptd.sys - 2008-04-13 12:15:12 334,848 ----a-w c:\windows\system32\drivers\srv.sys + 2008-09-08 10:41:42 333,824 ----a-w c:\windows\system32\drivers\srv.sys + 2007-03-30 15:11:14 267,864 ----a-r c:\windows\system32\DRVSTORE\hphdcsla_4C388B3206D5DD353FB65CAF17A08B709B454730\hpzids01.dll - 2008-04-13 19:33:26 246,272 ----a-w c:\windows\system32\es.dll + 2008-07-07 20:28:20 253,952 ----a-w c:\windows\system32\es.dll - 2007-06-06 10:53:34 1,195,888 ----a-w c:\windows\system32\FM20.DLL + 2007-08-23 01:03:38 1,195,888 ----a-w c:\windows\system32\FM20.DLL - 2008-07-12 23:56:02 335,464 ----a-w c:\windows\system32\FNTCACHE.DAT + 2002-09-24 00:00:32 350,584 ----a-w c:\windows\system32\FNTCACHE.DAT + 2007-03-11 21:32:42 1,645,320 ----a-w c:\windows\system32\gdiplus.dll + 2007-03-30 15:11:14 267,864 ----a-r c:\windows\system32\hpzids01.dll + 2007-03-28 14:01:18 117,760 ----a-w c:\windows\system32\hpzll5ha.dll - 2008-04-13 19:33:28 691,712 ----a-w c:\windows\system32\inetcomm.dll + 2008-04-11 19:05:22 691,712 ----a-w c:\windows\system32\inetcomm.dll - 2003-10-25 00:25:46 48,640 ----a-w c:\windows\system32\inetwh32.dll + 1999-01-28 21:44:20 49,152 ----a-r c:\windows\system32\Inetwh32.dll - 2008-02-22 01:23:36 135,168 ----a-w c:\windows\system32\java.exe + 2008-11-10 05:43:38 144,792 ----a-w c:\windows\system32\java.exe - 2008-02-22 01:23:40 135,168 ----a-w c:\windows\system32\javaw.exe + 2008-11-10 05:43:38 144,792 ----a-w c:\windows\system32\javaw.exe - 2008-02-22 02:33:32 139,264 ----a-w c:\windows\system32\javaws.exe + 2008-11-10 05:43:40 148,888 ----a-w c:\windows\system32\javaws.exe - 2008-04-13 19:33:28 512,000 ----a-w c:\windows\system32\jscript.dll + 2008-05-09 10:55:00 512,000 ----a-w c:\windows\system32\jscript.dll + 2008-10-05 03:24:02 3,695,008 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll + 2008-10-05 03:24:04 235,936 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe - 2008-06-20 00:30:40 74,649 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe + 2008-10-10 19:58:24 74,649 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe + 2008-11-30 19:48:14 84,661 ----a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe + 1995-05-19 12:44:06 322,832 ----a-r c:\windows\system32\MFC30.dll + 1999-07-02 04:05:50 133,904 ----a-r c:\windows\system32\mfcans32.dll - 2008-05-29 23:35:12 17,486,968 ----a-w c:\windows\system32\MRT.exe + 2008-11-03 16:10:26 17,318,336 ----a-w c:\windows\system32\MRT.exe + 1999-03-25 17:00:00 77,824 ----a-r c:\windows\system32\MSBind.dll - 2008-04-13 19:33:32 73,728 ----a-w c:\windows\system32\mscms.dll + 2008-06-24 16:44:02 74,240 ----a-w c:\windows\system32\mscms.dll + 1998-06-17 17:00:00 299,008 ----a-r c:\windows\system32\MSDbRptr.dll + 1999-02-03 13:39:40 395,776 ----a-r c:\windows\system32\msfrt40.dll - 2008-04-21 06:43:36 3,087,872 ----a-w c:\windows\system32\mshtml.dll + 2008-08-20 05:10:12 3,088,896 ----a-w c:\windows\system32\mshtml.dll - 2000-05-24 06:45:58 118,784 ----a-w c:\windows\system32\MSSTDFMT.DLL + 2001-11-29 22:23:28 118,784 ----a-w c:\windows\system32\Msstdfmt.dll - 1998-08-09 19:07:34 94,208 ----a-w c:\windows\system32\MSSTKPRP.DLL + 1998-06-17 19:00:00 94,208 ----a-r c:\windows\system32\Msstkprp.dll + 1993-07-23 00:00:00 210,944 ----a-w c:\windows\system32\Msvcrt10.dll + 2007-11-01 15:35:42 103,424 ----a-w c:\windows\system32\MyDIT_GenClassCoInst.dll - 2008-04-13 19:33:36 337,408 ----a-w c:\windows\system32\netapi32.dll + 2008-10-15 16:35:44 337,408 ----a-w c:\windows\system32\netapi32.dll + 1999-10-19 02:11:40 591,872 ----a-r c:\windows\system32\nsldapssl32v30.dll - 2008-04-13 19:07:28 2,067,968 ----a-w c:\windows\system32\ntkrnlpa.exe + 2008-08-14 13:23:50 2,068,096 ----a-w c:\windows\system32\ntkrnlpa.exe - 2008-04-13 19:08:04 2,191,104 ----a-w c:\windows\system32\ntoskrnl.exe + 2008-08-14 13:23:50 2,191,232 ----a-w c:\windows\system32\ntoskrnl.exe + 2004-01-28 17:50:38 57,344 ----a-w c:\windows\system32\pdfmont.dll + 2001-03-15 07:18:30 20,584 ----a-w c:\windows\system32\PdfPorts.dll + 2001-04-27 14:02:54 101,200 ----a-w c:\windows\system32\pdfshell.dll - 2008-07-12 23:59:10 53,288 ----a-w c:\windows\system32\perfc009.dat + 2008-10-17 20:48:04 53,288 ----a-w c:\windows\system32\perfc009.dat - 2008-07-12 23:59:10 74,206 ----a-w c:\windows\system32\perfc00C.dat + 2008-10-17 20:48:04 74,206 ----a-w c:\windows\system32\perfc00C.dat - 2008-07-12 23:59:10 345,084 ----a-w c:\windows\system32\perfh009.dat + 2008-10-17 20:48:04 345,084 ----a-w c:\windows\system32\perfh009.dat - 2008-07-12 23:59:10 427,928 ----a-w c:\windows\system32\perfh00C.dat + 2008-10-17 20:48:04 427,928 ----a-w c:\windows\system32\perfh00C.dat + 2000-01-07 19:56:50 22,528 ----a-r c:\windows\system32\Rhmmplay.dll + 2001-06-22 05:39:02 18,432 ----a-w c:\windows\system32\rnbovdd.dll + 2002-02-13 14:42:28 1,044,480 ----a-r c:\windows\system32\Roboex32.dll - 1998-03-25 05:54:08 15,872 ----a-w c:\windows\system32\SCP32.DLL + 2006-07-24 10:50:40 39,728 ----a-w c:\windows\system32\SCP32.DLL - 2008-04-13 19:33:42 180,224 ----a-w c:\windows\system32\scrobj.dll + 2008-05-09 10:55:00 180,224 ----a-w c:\windows\system32\scrobj.dll - 2008-04-13 19:33:42 172,032 ----a-w c:\windows\system32\scrrun.dll + 2008-05-09 10:55:00 172,032 ----a-w c:\windows\system32\scrrun.dll - 2008-04-13 19:33:42 1,499,136 ----a-w c:\windows\system32\shdocvw.dll + 2008-08-20 05:10:12 1,499,648 ----a-w c:\windows\system32\shdocvw.dll + 2001-06-22 05:39:02 49,664 ----a-w c:\windows\system32\snti386.dll + 2008-07-18 22:10:20 36,552 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll + 2008-10-16 14:08:58 34,328 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.788\wups.dll + 2008-07-18 22:10:40 45,768 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll + 2008-10-16 14:09:44 43,544 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.788\wups2.dll - 2007-11-30 12:39:30 18,296 ------w c:\windows\system32\spmsg.dll + 2008-07-08 13:03:54 18,296 ------w c:\windows\system32\spmsg.dll + 2001-03-15 07:26:36 9,734 ----a-w c:\windows\system32\spool\drivers\w32x86\3\AD2KREPI.DLL + 2001-09-10 02:14:20 77,824 ----a-w c:\windows\system32\spool\drivers\w32x86\3\ad2kuipi.dll + 2007-03-26 10:17:44 2,862,592 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpbcfgre.dll + 2006-11-30 11:14:06 671,816 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpcdmc32.dll + 2007-02-22 19:35:00 314,880 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpfie5ha.dll + 2007-02-20 11:29:02 337,920 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpfig5ha.dll + 2006-12-06 16:31:56 113,152 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpfrs5ha.dll + 2007-03-28 12:53:28 977,920 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpz3c5ha.dll + 2007-03-28 14:01:08 1,739,264 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpz3r5ha.dll + 2007-03-28 14:01:28 233,472 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzc35ha.dll + 2007-03-28 13:59:04 446,976 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzev5ha.dll + 2007-03-28 14:00:22 5,189,120 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzla5ha.dll + 2007-03-28 13:57:04 782,848 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzle5ha.dll + 2007-03-28 13:59:20 299,520 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzpr5ha.dll + 2007-03-28 13:32:56 670,208 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzss5ha.dll + 2007-03-28 12:52:24 8,602,112 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzst5ha.dll + 2007-03-28 13:58:06 3,291,648 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzui5ha.dll + 2007-03-28 12:53:22 3,419,648 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzur5ha.dll - 2006-10-26 19:58:24 793,392 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll + 2007-08-24 03:39:38 796,032 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll + 2004-01-29 22:07:50 401,408 ----a-w c:\windows\system32\spool\drivers\w32x86\3\pdf4u32.dll + 2004-01-28 17:48:38 225,280 ----a-w c:\windows\system32\spool\drivers\w32x86\3\pdfinst.exe + 2004-01-28 17:52:08 106,496 ----a-w c:\windows\system32\spool\drivers\w32x86\3\pdfui32.dll + 2006-12-20 12:50:04 269,824 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIDRV.DLL + 2006-12-20 12:48:34 208,384 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIDRVUI.DLL + 2006-12-20 12:48:32 620,544 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIRES.DLL + 2001-03-15 07:26:36 9,734 ----a-w c:\windows\system32\spool\drivers\w32x86\ad2krepi.dll + 2001-09-10 02:14:20 77,824 ----a-w c:\windows\system32\spool\drivers\w32x86\ad2kuipi.dll + 2007-03-26 10:17:44 2,862,592 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpbcfgre.dll + 2006-11-30 11:14:06 671,816 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpcdmc32.dll + 2007-02-22 19:35:00 314,880 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpfie5ha.dll + 2007-02-20 11:29:02 337,920 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpfig5ha.dll + 2006-12-06 16:31:56 113,152 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpfrs5ha.dll + 2007-03-28 12:53:28 977,920 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpz3c5ha.dll + 2007-03-28 14:01:08 1,739,264 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpz3r5ha.dll + 2007-03-28 14:01:28 233,472 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpzc35ha.dll + 2007-03-28 13:59:04 446,976 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpzev5ha.dll + 2007-03-28 14:00:22 5,189,120 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpzla5ha.dll + 2007-03-28 13:57:04 782,848 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpzle5ha.dll + 2007-03-28 13:59:20 299,520 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpzpr5ha.dll + 2007-03-28 13:32:56 670,208 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpzss5ha.dll + 2007-03-28 12:52:24 8,602,112 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpzst5ha.dll + 2007-03-28 13:58:06 3,291,648 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpzui5ha.dll + 2007-03-28 12:53:22 3,419,648 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\hpzur5ha.dll + 2006-12-20 12:50:04 269,824 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\UNIDRV.DLL + 2006-12-20 12:48:34 208,384 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\UNIDRVUI.DLL + 2006-12-20 12:48:32 620,544 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_d1400_seri6053\UNIRES.DLL - 2006-10-26 19:58:24 793,392 ----a-w c:\windows\system32\spool\drivers\w32x86\mdigraph.dll + 2007-08-24 03:39:38 796,032 ----a-w c:\windows\system32\spool\drivers\w32x86\mdigraph.dll + 2004-01-29 22:07:50 401,408 ----a-w c:\windows\system32\spool\drivers\w32x86\pdf4u32.dll + 2004-01-28 17:48:38 225,280 ----a-w c:\windows\system32\spool\drivers\w32x86\pdfinst.exe + 2004-01-28 17:52:08 106,496 ----a-w c:\windows\system32\spool\drivers\w32x86\pdfui32.dll + 2007-03-28 13:57:34 274,944 ----a-w c:\windows\system32\spool\prtprocs\w32x86\hpzpp5ha.dll + 1998-06-17 17:00:00 153,600 ----a-r c:\windows\system32\Tlbinf32.dll - 2008-04-13 19:34:26 60,416 ------w c:\windows\system32\tzchange.exe + 2008-07-11 12:42:28 62,976 ------w c:\windows\system32\tzchange.exe - 2008-04-13 19:33:50 621,568 ----a-w c:\windows\system32\urlmon.dll + 2008-08-20 05:10:12 620,544 ----a-w c:\windows\system32\urlmon.dll + 1998-06-18 04:33:12 89,360 ----a-r c:\windows\system32\Vb5db.dll + 1999-07-07 10:40:08 29,696 ----a-r c:\windows\system32\Vb5stkit.dll - 2000-07-15 00:00:00 101,888 ----a-w c:\windows\system32\VB6STKIT.DLL + 1999-03-25 17:00:00 101,888 ----a-r c:\windows\system32\Vb6stkit.dll - 2008-04-13 19:33:50 434,176 ----a-w c:\windows\system32\vbscript.dll + 2008-05-09 10:55:00 430,080 ----a-w c:\windows\system32\vbscript.dll + 2002-02-13 14:42:28 40,960 ----a-r c:\windows\system32\wh2robo.dll + 2002-11-06 02:45:32 327,680 ----a-w c:\windows\system32\windows media\server\wmsservertypelib.dll - 2008-04-21 06:43:36 670,208 ----a-w c:\windows\system32\wininet.dll + 2008-08-20 05:10:12 670,208 ----a-w c:\windows\system32\wininet.dll - 2008-04-13 19:33:50 408,064 ----a-w c:\windows\system32\wmadmod.dll + 2004-08-11 01:45:04 380,144 ----a-w c:\windows\system32\wmadmod.dll - 2008-04-13 19:33:50 759,296 ----a-w c:\windows\system32\wmsdmod.dll + 2004-08-11 01:45:04 773,368 ----a-w c:\windows\system32\wmsdmod.dll + 2002-11-06 02:10:14 167,936 ----a-w c:\windows\system32\wmserror.dll - 2008-04-13 19:33:50 485,376 ----a-w c:\windows\system32\wmspdmod.dll + 2004-08-11 01:45:06 531,192 ----a-w c:\windows\system32\wmspdmod.dll + 2004-08-11 01:45:06 1,181,944 ----a-w c:\windows\system32\wmvadvd.dll - 2008-04-13 19:33:50 809,984 ----a-w c:\windows\system32\wmvdmod.dll + 2004-08-11 01:45:06 871,160 ----a-w c:\windows\system32\wmvdmod.dll - 2008-04-13 19:34:30 155,648 ----a-w c:\windows\system32\wscript.exe + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\system32\wscript.exe - 2008-04-13 19:33:52 90,112 ----a-w c:\windows\system32\wshext.dll + 2008-05-09 10:55:00 90,112 ----a-w c:\windows\system32\wshext.dll + 2005-09-28 15:35:48 61,136 ----a-w c:\windows\system32\xinput9_1_0.dll + 2008-12-04 21:51:00 16,384 ----a-w c:\windows\Temp\Perflib_Perfdata_580.dat + 2008-11-07 00:19:00 1,230,336 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll + 2008-09-30 16:42:08 1,286,152 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll + 2008-09-30 16:45:12 91,656 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll + 2007-03-12 00:43:26 96,256 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_6e85597b\ATL80.dll + 2007-08-13 10:53:52 479,232 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcm80.dll + 2007-08-13 10:53:52 548,864 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcp80.dll + 2007-08-13 10:53:52 626,688 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcr80.dll + 2007-02-14 01:25:54 1,093,632 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfc80.dll + 2007-02-14 01:25:54 1,079,808 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfc80u.dll + 2007-02-14 01:25:54 69,632 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfcm80.dll + 2007-02-14 01:25:54 57,344 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfcm80u.dll + 2007-03-11 21:32:42 40,960 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_341af80a\mfc80CHS.dll + 2007-03-11 21:32:42 45,056 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_341af80a\mfc80CHT.dll + 2007-03-11 21:32:42 65,536 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_341af80a\mfc80DEU.dll + 2007-03-11 21:32:42 57,344 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_341af80a\mfc80ENU.dll + 2007-03-11 21:32:42 61,440 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_341af80a\mfc80ESP.dll + 2007-03-11 21:32:42 61,440 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_341af80a\mfc80FRA.dll + 2007-03-11 21:32:42 61,440 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_341af80a\mfc80ITA.dll + 2007-03-11 21:32:42 49,152 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_341af80a\mfc80JPN.dll + 2007-03-11 21:32:42 49,152 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_341af80a\mfc80KOR.dll + 2008-04-15 17:49:32 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\GdiPlus.dll . -- Instantané actualisé -- . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0A0DDBD3-6641-40B9-873F-BBDD26D6C14E}] 2008-11-21 17:53 147928 --a------ c:\program files\easyMule\modules\IE2EM.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600] c:\documents and settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ DSLMON.lnk - c:\program files\Menara\dslmon.exe [2007-12-02 962661] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=avgrsstx.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "SENTINEL"= snti386.dll HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\autoload HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ntuser [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\adobe reader speed launcher] --a------ 2008-06-12 02:38 34672 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3] --a------ 2008-11-15 12:11 2235920 c:\program files\IObit\Advanced SystemCare 3\AWC.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avg8_tray] --a------ 2008-11-28 18:50 1261336 c:\progra~1\AVG\AVG8\avgtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eMuleAutoStart] --a------ 2008-11-21 18:54 6145608 c:\program files\easyMule\emule.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds] --a------ 2004-02-10 10:51 118784 c:\windows\system32\hkcmd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray] --a------ 2004-02-10 10:55 155648 c:\windows\system32\igfxtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] --a------ 2005-01-12 03:01 32768 c:\program files\CyberLink\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\spybotsd teatimer] -rahs---- 2008-07-07 09:42 2156368 c:\program files\Spybot - Search & Destroy\TeaTimer.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2007-12-26 22:50 68856 c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant] --a------ 2008-05-02 04:15 15872 c:\program files\Unlocker\UnlockerAssistant.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "ioloSystemService"=2 (0x2) "ioloFileInfoList"=2 (0x2) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "d:\\Doc_C_2\\Program Files\\eMule\\emule.exe"= "c:\\WINDOWS\\System32\\mmc.exe"= "d:\\office2007\\Office12\\OUTLOOK.EXE"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\eMule\\emule.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "c:\\Program Files\\FlashGet\\flashget.exe"= "c:\\Program Files\\easyMule\\emule.exe"= "c:\\Program Files\\AVG\\AVG8\\avgupd.exe"= "c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"= "c:\\Program Files\\Mozilla Firefox\\firefox.exe"= "c:\\Program Files\\Ares\\Ares.exe"= R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\Drivers\avgrkx86.sys [2008-11-27 12936] R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [2008-11-27 98440] R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\Drivers\avgtdix.sys [2008-11-27 90632] R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2008-11-27 231704] S3 getplus® helper;getPlus® Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2008-11-30 33752] S3 PAC207;SoC PC-Camera Beta3;c:\windows\system32\DRIVERS\pfc027.sys [2005-02-24 162176] S3 qcusbser;Mobile Connector USB Device for Legacy Serial Communication;c:\windows\system32\DRIVERS\cmusbser.sys [2008-10-17 97408] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H] \Shell\AutoRun\command - h:\.\ShowModem.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{085b1fa8-c9b0-11d6-a7f0-4d6564696130}] \Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL ntldr.exe \Shell\´ò¿ª(&O)\command - ntldr.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{085b1fa9-c9b0-11d6-a7f0-4d6564696130}] \Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL ntldr.exe \Shell\´ò¿ª(&O)\command - H:\ntldr.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{742e5672-9c8c-11dd-a86a-000475db87ba}] \Shell\AutoRun\command - h:\.\ShowModem.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{81bca4ed-841b-11dd-a7f2-4d6564696130}] \Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL ntldr.exe \Shell\´ò¿ª(&O)\command - ntldr.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9d2500ee-a5f6-11dd-a89b-000475db87ba}] \Shell\AutoRun\command - vfjc8mxm.exe \Shell\explore\Command - vfjc8mxm.exe \Shell\open\Command - vfjc8mxm.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b796c148-cf5a-11d6-a3ca-000475db87ba}] \shell\autorun\command - J:\qquq.bat \shell\explore\command - J:\qquq.bat \shell\open\command - J:\qquq.bat . Contenu du dossier 'Tâches planifiées' 2008-04-21 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-06-03 13:42] 2008-10-01 c:\windows\Tasks\Uniblue SpyEraser.job - f:\spyeraser\SpyEraser.exe [] . - - - - ORPHELINS SUPPRIMES - - - - MSConfigStartUp-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Fichiers communs\Ahead\lib\NMBgMonitor.exe MSConfigStartUp-East-Tec Eraser 2007 - d:\east-tec eraser 2007\etsecureerase.exe MSConfigStartUp-Uniblue Registry Booster - h:\program files\Uniblue\Registry Booster\RegistryBooster.exe . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.daemon-search.com/startpage mWindow Title = IE: &Tout télécharger avec FlashGet - c:\program files\FlashGet\jc_all.htm IE: &Télécharger avec FlashGet - c:\program files\FlashGet\jc_link.htm IE: download by easymule - c:\program files\easyMule\IE2EM.htm IE: Télécharger avec Star Downloader TCP: {DEC71BF0-D12A-4DCD-AC55-7D962623E690} = 62.251.229.243 212.217.0.14 FireFox -: Profile - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ctjbju25.default\ FF -: plugin - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ctjbju25.default\extensions\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}\plugins\np_gp.dll FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npdeploytk.dll FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npjp2.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins\np_gp.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins\npdeploytk.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-04 22:10:36 Windows 5.1.2600 Service Pack 3 FAT NTAPI Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\926d8472] "ImagePath"="\SystemRoot\System32\drivers\926d8472.sys" . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'winlogon.exe'(572) c:\windows\system32\avgrsstx.dll - - - - - - - > 'lsass.exe'(680) c:\windows\system32\avgrsstx.dll . Heure de fin: 2008-12-04 22:11:36 ComboFix-quarantined-files.txt 2008-12-04 22:11:22 ComboFix4.txt 2008-05-10 23:04:08 ComboFix5.txt 2008-12-04 22:06:20 ComboFix3.txt 2008-05-13 23:56:54 ComboFix2.txt 2008-07-17 23:34:52 Avant-CF: 2 638 249 984 octets libres Après-CF: 2,675,539,968 octets libres 959 --- E O F --- 2008-11-22 19:50:08

Merci apollo pour ta patience et ton aide. Je te prie de m'excuser pour ce retard qui est due au plantage de l'ordi à la fin de chaque scan. Le rapport demandé est le suivant: Scan area - My Computer: A:\ C:\ D:\ E:\ G:\ Scan statistics: Files scanned: 124576 Threat name: 18 Infected objects: 37 Suspicious objects: 0 Duration of the scan: 03:41:16 File name / Threat name / Threats count C:\Documents and Settings\All Users\Application Data\Avg8\update\backup\avgtoolbar.dll Infected: not-a-virus:AdWare.Win32.MegaSearch.ad 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Infected: Worm.Win32.Mabezat.b 3 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Infected: Trojan.Win32.Pakes.dft 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Infected: Backdoor.Win32.Hijack.e 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Infected: Trojan-Dropper.Win32.Agent.yzp 2 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Bayfraud.hn 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Boîte de réception.dbx Infected: Hoax.Win32.BadJoke.Formatter 2 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Usbankfraud.p 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Citifraud.ae 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Smitfraud.c 2 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Citifraud.ai 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Sunfraud.aj 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Bankfraud.u 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Smitfraud.a 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Bankfraud.dq 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Boîte de réception.dbx Infected: Backdoor.Win32.Hijack.e 1 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities\{B18CA808-66D7-406C-B6A6-5CAC75C0A02D}\Microsoft\Outlook Express\Éléments envoyés.dbx Infected: Hoax.Win32.BadJoke.Formatter 1 C:\Downloads\Advanced.SystemCare.Pro.3.0.0.586.rar Infected: Trojan-Dropper.Win32.Agent.zsb 1 D:\documents\Mes documents\download\McCabe__Smith__Harriot__7th_Edition__Solution_manual.rar Infected: Worm.Win32.AutoRun.dye 1 D:\documents\Mes documents\Nouveau dossier (2)\fash\Nouveau dossier (3)\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Bayfraud.hn 1 D:\documents\Mes documents\Nouveau dossier (2)\fash\Nouveau dossier (3)\Boîte de réception.dbx Infected: Hoax.Win32.BadJoke.Formatter 1 D:\documents\Mes documents\Nouveau dossier (2)\fash\Nouveau dossier (3)\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Usbankfraud.p 1 D:\documents\Mes documents\Nouveau dossier (2)\fash\Nouveau dossier (3)\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Citifraud.ae 1 D:\documents\Mes documents\Nouveau dossier (2)\fash\Nouveau dossier (3)\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Smitfraud.c 2 D:\documents\Mes documents\Nouveau dossier (2)\fash\Nouveau dossier (3)\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Citifraud.ai 1 D:\documents\Mes documents\Nouveau dossier (2)\fash\Nouveau dossier (3)\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Sunfraud.aj 1 D:\documents\Mes documents\Nouveau dossier (2)\fash\Nouveau dossier (3)\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Bankfraud.u 1 D:\documents\Mes documents\Nouveau dossier (2)\fash\Nouveau dossier (3)\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Smitfraud.a 1 D:\documents\Mes documents\Nouveau dossier (2)\fash\Nouveau dossier (3)\Boîte de réception.dbx Infected: Trojan-Spy.HTML.Bankfraud.dq 1 D:\documents\Mes documents\Nouveau dossier (2)\fash\Nouveau dossier (4)\Boîte de réception.dbx Infected: Backdoor.Win32.Hijack.e 1 D:\Doc_C_2\Program Files\eMule\Incoming\avg internet 8.0.156 keygen.exe Infected: not-a-virus:AdWare.Win32.Agent.fps 1 The selected area was scanned.

Un grand grand......merci Ces cochonneries sont dues à mes deux frères. le rapport TB.txt est le suivant -----------\\ ToolBar S&D 1.2.5 XP/Vista Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : Intel® Pentium® 4 CPU 2.40GHz ) BIOS : Default System BIOS USER : Administrateur ( Administrator ) BOOT : Normal boot Antivirus : AVG Anti-Virus 8.0 (Activated) A:\ (USB) C:\ (Local Disk) - FAT32 - Total:19 Go (Free:3 Go) D:\ (Local Disk) - NTFS - Total:18 Go (Free:2 Go) E:\ (CD or DVD) G:\ (CD or DVD) "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 ) Option : [2] ( 30/11/2008| 0:07 ) -----------\\ SUPPRESSION Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll.bak0 Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml Supprime! - C:\Program Files\DAEMON Tools Toolbar -----------\\ Recherche de Fichiers / Dossiers ... -----------\\ Extensions (Administrateur) - {27A2FD41-CB23-4518-AB5C-C25BAFFDE531} => switchproxy (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.daemon-search.com/startpage" "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.msn.com/" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896" "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" --------------------\\ Recherche d'autres infections --------------------\\ Cracks & Keygens .. C:\DOCUME~1\ADMINI~1\Crack C:\DOCUME~1\ADMINI~1\Recent\avg 8.0.156 serial keygen.rar.lnk C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\Comment Gagner gros sur internet by Sierra\2.Astuce triche Eurobarre quand vous ˆtes absent\Crack surfrobot C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\Comment Gagner gros sur internet by Sierra\2.Astuce triche Eurobarre quand vous ˆtes absent\Crack surfrobot\file_id.diz C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\Comment Gagner gros sur internet by Sierra\2.Astuce triche Eurobarre quand vous ˆtes absent\Crack surfrobot\keygen.exe C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Films\M\Ma 6T va crack-er.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Alexandra Ledermann 5 - L'h‚ritage du Haras avec Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Call Of Duty avec Keygen et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Cossacks 2 avec Serial et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Discworld Noir avec Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Entraineur 5 - Saison 2004-2005 avec Crack NOCD (l').htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Fifa 2005 avec Serial et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\GTR avec License et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Live for speed S2 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Medal Of Honor - Batailles du Pacifique avec Serial et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Medal of Honor- L'Offensive (Add-On) + En Formation (Add-On) avec Crack NOCD et Serial.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Qui veut gagner des millions - Seconde Edition avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Rollercoaster Tycoon 3 avec Crack NOCD et Serial.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Sherlock Holmes - Le Mystere De La Momie avec Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Sims 2 avec Serial et Crack NOCD (les).htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Star Academy (Le Jeu) avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Vietcong avec Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Virtual Skipper avec Crack NOCD, Serial et Online Patch.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\XIII avec Crack NOCD et Serial.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\ACDSee v8.0 Build 41 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Acid Pro 5 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Acronis Power Utilities 2005 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Adobe Acrobat Professionel 7 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Adobe Photoshop CS2 v9.0 FR avec Crack et Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Alcohol 120% 1.9.5.3105 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Avast Antivirus Pro v4.6.691 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\AVG Antivirus Pro 7.0.338 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Bitdefender Solution Securit‚ 2005 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Borland Delphi 7 Studio Entreprise avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\ChrisTV 4.50 Professional avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Click imp“t 2005 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\CloneCD 5.2.6.1 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\CloneDVD 2.8.5.1 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Connection Manager Pro v1.0 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Corel Paint Shop Pro X avec Crack et Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Cover XP PRO 1.65 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Crack Windows Genuine Advantage v1.3.272.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\CuteFTP Pro v7.1.06.07.2005 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Digital Video Duplicator 3 avec Serial et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\DivX Pro 5.2.1 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Download Accelerator Premium 7.4 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Droppix Recorder 1.2.0.2 (Iso PowerPack Inclut) avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\DVD Profiler 2.4.0.868 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Easy CD-DA Extractor 8.2.2 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\EasyRecovery Professional v6.10.07 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\EBP Gestion Commerciale 2005 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\EDonkey 2000 Pro v1.43.b avec Crack et Patch FR.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\EVEREST Ultimate Edition 2.20 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\F-Secure Antivirus 2005 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\FlashGet 1.71 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\FTP Expert 3.70.3 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Gif Animator v5 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Incredimail Build-2014 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\InterVideo WinDVD 7.0 Build 27.073 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\IsoBuster 1.8.0.4 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Jv16 PowerTools 2005 v1.5.1.310 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Kaspersky Anti-Hacker 1.8.180 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Magix Melody Maker 100 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\MediaRecover Pro V3.0.2.9 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Nero 6.6.0.16 avec le Patch FR, Keygen et Plugins Audio.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Nero v7 Premium avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\NOD32 Antivirus v2.50.41 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Norton AntiVirus 2005 avec Keygen et Patch Live Update.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\O&O Defrag Professional Edition 8.0.1341 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Opera v 8.01 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Paint Shop Pro 9 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\PC Cillin Internet Security 2005 v12 avec le Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\PhotoDVD v2.0.11 Build 955 Avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\ProShow Gold 2.5.1635 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Quark Xpress 6.0 avec Crack, Serial et Cours en video.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\RealPlayer 10.5 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\SONY Sound Forge 8 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Steganos Coffre-Fort 8.05 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Steganos Internet Anonym 2006 v8 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Steganos P2P S‚curis‚ 6.0.4 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\StyleXP 3.13 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\System Mechanic Professional v5.5a avec Keygen et Traduction FR.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Systran Professional Premium v5 avec Crack et Serial.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\TuneUp Utilities 2004 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Tweak-XP Pro 4.04 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\VNC Entreprise Edition 4.1.7 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Winamp Pro 5.1 avec Keygen, Patch FR, Skins et Plugins.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\WinFax eXPert 8.05 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Winrar 3.50 version Finale avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Winzip 10 Beta(ENG)avec Crack(Pass- www.goldesel.6x.to).htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Winzip 9 Final avec Patch FR et Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\ZoneAlarm Pro 6.0.667.000 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\ZoneAlarm Security Suite 6.0.667.000 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Crack\WRARcrk.exe 1 - "C:\ToolBar SD\TB_1.txt" - 29/11/2008|20:26 - Option : [1] 2 - "C:\ToolBar SD\TB_2.txt" - 30/11/2008| 0:09 - Option : [2] -----------\\ Fin du rapport a 0:09:32,58 le rapport hijackthis est le suivant Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 00:17:49, on 30/11/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\a-squared Free\a2service.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\SearchIndexer.exe C:\PROGRA~1\AVG\AVG8\avgam.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Menara\dslmon.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Administrateur\Bureau\den.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: IE2EMBHO Class - {0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} - C:\Program Files\easyMule\modules\IE2EM.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: LuckyTender - {5E2402A0-5F99-4188-B30D-D8743996B340} - C:\Program Files\LuckyTender\1.3.0\LuckyTender.dll (file missing) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O3 - Toolbar: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Startup: DSLMON.lnk = C:\Program Files\Menara\dslmon.exe O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Download by easyMule - C:\Program Files\easyMule\IE2EM.htm O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\office2007\visio\OFFICE11\REFIEBAR.DLL O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} - O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - O17 - HKLM\System\CCS\Services\Tcpip\..\{DEC71BF0-D12A-4DCD-AC55-7D962623E690}: NameServer = 62.251.229.243 212.217.0.14 O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: Ares Chatroom server (AresChatServer) - Unknown owner - C:\Program Files\Ares\chatServer.exe (file missing) O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- End of file - 6389 bytes Encore une fois merci de ta patience

Merci infiniment le rapport TB.txt est le suivant -----------\\ ToolBar S&D 1.2.5 XP/Vista Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : Intel® Pentium® 4 CPU 2.40GHz ) BIOS : Default System BIOS USER : Administrateur ( Administrator ) BOOT : Normal boot Antivirus : AVG Anti-Virus 8.0 (Activated) A:\ (USB) C:\ (Local Disk) - FAT32 - Total:19 Go (Free:3 Go) D:\ (Local Disk) - NTFS - Total:18 Go (Free:2 Go) E:\ (CD or DVD) G:\ (CD or DVD) "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 ) Option : [1] ( 29/11/2008|20:25 ) -----------\\ Recherche de Fichiers / Dossiers ... C:\Program Files\DAEMON Tools Toolbar C:\Program Files\DAEMON Tools Toolbar\Resources C:\Program Files\DAEMON Tools Toolbar\uninst.exe C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll.bak0 C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico C:\Program Files\DAEMON Tools Toolbar\Resources\as.png C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico C:\Program Files\\DAEMON Tools Toolbar C:\Program Files\DAEMON Tools Toolbar\Resources C:\Program Files\DAEMON Tools Toolbar\uninst.exe C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll.bak0 C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico C:\Program Files\DAEMON Tools Toolbar\Resources\as.png C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico -----------\\ Extensions (Administrateur) - {27A2FD41-CB23-4518-AB5C-C25BAFFDE531} => switchproxy (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.daemon-search.com/startpage" "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896" "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" --------------------\\ Recherche d'autres infections --------------------\\ Cracks & Keygens .. C:\DOCUME~1\ADMINI~1\Crack C:\DOCUME~1\ADMINI~1\Recent\avg 8.0.156 serial keygen.rar.lnk C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\Comment Gagner gros sur internet by Sierra\2.Astuce triche Eurobarre quand vous ˆtes absent\Crack surfrobot C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\Comment Gagner gros sur internet by Sierra\2.Astuce triche Eurobarre quand vous ˆtes absent\Crack surfrobot\file_id.diz C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\Comment Gagner gros sur internet by Sierra\2.Astuce triche Eurobarre quand vous ˆtes absent\Crack surfrobot\keygen.exe C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Films\M\Ma 6T va crack-er.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Alexandra Ledermann 5 - L'h‚ritage du Haras avec Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Call Of Duty avec Keygen et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Cossacks 2 avec Serial et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Discworld Noir avec Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Entraineur 5 - Saison 2004-2005 avec Crack NOCD (l').htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Fifa 2005 avec Serial et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\GTR avec License et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Live for speed S2 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Medal Of Honor - Batailles du Pacifique avec Serial et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Medal of Honor- L'Offensive (Add-On) + En Formation (Add-On) avec Crack NOCD et Serial.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Qui veut gagner des millions - Seconde Edition avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Rollercoaster Tycoon 3 avec Crack NOCD et Serial.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Sherlock Holmes - Le Mystere De La Momie avec Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Sims 2 avec Serial et Crack NOCD (les).htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Star Academy (Le Jeu) avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Vietcong avec Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\Virtual Skipper avec Crack NOCD, Serial et Online Patch.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Jeux PC\XIII avec Crack NOCD et Serial.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\ACDSee v8.0 Build 41 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Acid Pro 5 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Acronis Power Utilities 2005 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Adobe Acrobat Professionel 7 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Adobe Photoshop CS2 v9.0 FR avec Crack et Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Alcohol 120% 1.9.5.3105 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Avast Antivirus Pro v4.6.691 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\AVG Antivirus Pro 7.0.338 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Bitdefender Solution Securit‚ 2005 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Borland Delphi 7 Studio Entreprise avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\ChrisTV 4.50 Professional avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Click imp“t 2005 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\CloneCD 5.2.6.1 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\CloneDVD 2.8.5.1 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Connection Manager Pro v1.0 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Corel Paint Shop Pro X avec Crack et Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Cover XP PRO 1.65 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Crack Windows Genuine Advantage v1.3.272.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\CuteFTP Pro v7.1.06.07.2005 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Digital Video Duplicator 3 avec Serial et Crack NOCD.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\DivX Pro 5.2.1 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Download Accelerator Premium 7.4 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Droppix Recorder 1.2.0.2 (Iso PowerPack Inclut) avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\DVD Profiler 2.4.0.868 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Easy CD-DA Extractor 8.2.2 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\EasyRecovery Professional v6.10.07 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\EBP Gestion Commerciale 2005 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\EDonkey 2000 Pro v1.43.b avec Crack et Patch FR.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\EVEREST Ultimate Edition 2.20 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\F-Secure Antivirus 2005 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\FlashGet 1.71 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\FTP Expert 3.70.3 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Gif Animator v5 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Incredimail Build-2014 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\InterVideo WinDVD 7.0 Build 27.073 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\IsoBuster 1.8.0.4 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Jv16 PowerTools 2005 v1.5.1.310 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Kaspersky Anti-Hacker 1.8.180 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Magix Melody Maker 100 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\MediaRecover Pro V3.0.2.9 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Nero 6.6.0.16 avec le Patch FR, Keygen et Plugins Audio.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Nero v7 Premium avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\NOD32 Antivirus v2.50.41 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Norton AntiVirus 2005 avec Keygen et Patch Live Update.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\O&O Defrag Professional Edition 8.0.1341 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Opera v 8.01 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Paint Shop Pro 9 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\PC Cillin Internet Security 2005 v12 avec le Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\PhotoDVD v2.0.11 Build 955 Avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\ProShow Gold 2.5.1635 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Quark Xpress 6.0 avec Crack, Serial et Cours en video.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\RealPlayer 10.5 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\SONY Sound Forge 8 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Steganos Coffre-Fort 8.05 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Steganos Internet Anonym 2006 v8 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Steganos P2P S‚curis‚ 6.0.4 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\StyleXP 3.13 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\System Mechanic Professional v5.5a avec Keygen et Traduction FR.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Systran Professional Premium v5 avec Crack et Serial.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\TuneUp Utilities 2004 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Tweak-XP Pro 4.04 avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\VNC Entreprise Edition 4.1.7 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Winamp Pro 5.1 avec Keygen, Patch FR, Skins et Plugins.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\WinFax eXPert 8.05 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Winrar 3.50 version Finale avec Crack.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Winzip 10 Beta(ENG)avec Crack(Pass- www.goldesel.6x.to).htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\Winzip 9 Final avec Patch FR et Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\ZoneAlarm Pro 6.0.667.000 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Bureau\eMule-paradise\www.eMule-paradise.com\Softwares\ZoneAlarm Security Suite 6.0.667.000 avec Keygen.htm C:\DOCUME~1\ADMINI~1\Crack\WRARcrk.exe 1 - "C:\ToolBar SD\TB_1.txt" - 29/11/2008|20:26 - Option : [1] -----------\\ Fin du rapport a 20:26:27,57 le rapport mbam_log est le suivant Malwarebytes' Anti-Malware 1.30 Version de la base de données: 1435 Windows 5.1.2600 Service Pack 3 29/11/2008 23:03:47 mbam-log-2008-11-29 (23-03-47).txt Type de recherche: Examen complet (C:\|D:\|) Eléments examinés: 176683 Temps écoulé: 57 minute(s), 20 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté) Merci

Salut J'ai l'impression que l'analyse Hijackthis de mon ordinateur n'est pas propre et j'aimerai d'avoir de l'aide pour l'analyser et supprimer l'infection Merci d'avance Le rapport hijackthis est le suivant Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:53:35, on 27/11/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\a-squared Free\a2service.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\SearchIndexer.exe C:\PROGRA~1\AVG\AVG8\avgam.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Menara\dslmon.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\HP\Smart Web Printing\hpswp_clipbook.exe C:\Program Files\Teleca Shared\Generic.exe C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Administrateur\Bureau\den.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: IE2EMBHO Class - {0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} - C:\Program Files\easyMule\modules\IE2EM.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: LuckyTender - {5E2402A0-5F99-4188-B30D-D8743996B340} - C:\Program Files\LuckyTender\1.3.0\LuckyTender.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll O3 - Toolbar: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Startup: DSLMON.lnk = C:\Program Files\Menara\dslmon.exe O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Download by easyMule - C:\Program Files\easyMule\IE2EM.htm O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\office2007\visio\OFFICE11\REFIEBAR.DLL O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} - O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - O17 - HKLM\System\CCS\Services\Tcpip\..\{DEC71BF0-D12A-4DCD-AC55-7D962623E690}: NameServer = 62.251.229.243 212.217.0.14 O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: Ares Chatroom server (AresChatServer) - Unknown owner - C:\Program Files\Ares\chatServer.exe (file missing) O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- End of file - 6802 bytes Un grand Merci